last executing test programs: 5.297423593s ago: executing program 2 (id=17171): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001980)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x3, 0x7, 0x0, 0x4000000, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x36, &(0x7f0000000100)=r3, 0x120) 3.303076806s ago: executing program 2 (id=17176): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18e102, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x86e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0001", 0x23}], 0x1}, 0x0) 3.224763858s ago: executing program 4 (id=17177): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x8, 0x2, 0xd0, 0x5, 0x0, 0x1, 0x84016, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000200)}, 0x10888, 0x3, 0xe12f, 0x8, 0x400, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, r1, 0x9, r0, 0x8) r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x1, 0x8, 0x7, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x202, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x1}, r2, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xd, &(0x7f00000000c0), 0x4f) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.111055322s ago: executing program 2 (id=17180): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r8 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x5411, 0x0) 3.110788442s ago: executing program 3 (id=17181): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x42) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000edffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014005800b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000000000"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f00000001c0)="817d5cc2bf2591bbc55db98da06af93ad8e352de5817daedaa66c11485d6740b4733ac2d4234a9aacdfa6e81f00fb4ddc7efc73c18dfeeea84df1e92a6066eaff2850ddae70d75b85394f1e214e986cb9a60bf5fc3ae6d9e97d64915a7254547822c2374b553ac91b29a835275d3686f5ac1a0ba7fede7d19ac29605bd66e01b8648b5c5a90d49af8ab7f8d71c3aa739ea726b3ce9572695657bd8e01a75a7c8f1ae0b6077360dfbfd11641a3e8d10b58b4b0dd762ab1b99dc053ba481022944dae4575b22174b2f349b29a073298d8837368e318f", &(0x7f00000002c0)=""/163, &(0x7f0000000380)="fb0704f7b5491d993585ac0c0d6ff49d463d4394", &(0x7f0000000440)="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", 0x9, r3, 0x4}, 0x38) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac0080002000700020025", 0x2d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) 2.443426413s ago: executing program 1 (id=17182): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2.442619223s ago: executing program 0 (id=17183): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f0000000000)="660f829e3add48b0", 0x7}, {&(0x7f0000000800)="ad8c9ca6cf1b", 0x1c}], 0x3}, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x7, 0x8, 0x9, 0xff, 0x0, 0x80000001, 0x40, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x9800, 0x7, 0x200800, 0x9, 0x9, 0x2, 0x6, 0x0, 0xe1, 0x0, 0x7}, 0x0, 0x8, r1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101a0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000005c0)=r10, 0x12) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="18bbeca62401a516cf6a161d7019282782e73bf8ac78d05a90864c74644de71c2e0e3c9e4a7122ebe37badf383e83f2d75741d856759f44457eede6f34e3ee1028e2971dd6167cc0de2be6c39a860355dffeca2afe1b98a71a1b71ecf1154e144b542c5098bcb2a4ac70d467e820433357876a38ea19142bcd03b0182828a4614a23dfffac0988ae9352902b6503d054ffafe8e5b6", 0x95}], 0x1, &(0x7f00000009c0)=[@rights={{0x20, 0x1, 0x1, [r7, r1, r7, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, r8]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r4, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r1, r7]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r8, r6, r3, r5, r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}], 0x140, 0x20000000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 2.416380644s ago: executing program 3 (id=17184): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x42) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000edffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014005800b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000000000"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f00000001c0)="817d5cc2bf2591bbc55db98da06af93ad8e352de5817daedaa66c11485d6740b4733ac2d4234a9aacdfa6e81f00fb4ddc7efc73c18dfeeea84df1e92a6066eaff2850ddae70d75b85394f1e214e986cb9a60bf5fc3ae6d9e97d64915a7254547822c2374b553ac91b29a835275d3686f5ac1a0ba7fede7d19ac29605bd66e01b8648b5c5a90d49af8ab7f8d71c3aa739ea726b3ce9572695657bd8e01a75a7c8f1ae0b6077360dfbfd11641a3e8d10b58b4b0dd762ab1b99dc053ba481022944dae4575b22174b2f349b29a073298d8837368e318f", &(0x7f00000002c0)=""/163, &(0x7f0000000380)="fb0704f7b5491d993585ac0c0d6ff49d463d4394", &(0x7f0000000440)="04fcf097ed3346c97013f85a38f8beaaa051eba5f6ff0d15b0e0a3529ac72a3e5f8b36f5bc16fee02e9ee68c9c8773668418d896c625b883c5b89f9f28a0bb8207db4415e2199b0fb7946eaff31eae02fba0ec40a9993e1769a4c66511304fc30420b14ff9cdb7e3edaf66be534a77bf44d274511d21cfe0afb8c7fd344f48f0f597a00fdd8b7c0ccf90840c60d84621910385cf65cb7a8caf98e76a9a889fc788f67308517eda5f7cc2f899c2f04e766b24e6ec757b88bb191d2c477ca26e35c12b4263af365f70c927b5dfea7ff508ec77c0d3c518038f86f33d1bea8faa9fe9aaf9db176c61f4697856b21fb1990294628ddbc89c28b1f83577c3599dd2", 0x9, r3, 0x4}, 0x38) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) 2.379988515s ago: executing program 2 (id=17185): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f0000000000)="660f829e3add48b0", 0x7}, {&(0x7f0000000800)="ad8c9ca6cf1b", 0x1c}], 0x3}, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x7, 0x8, 0x9, 0xff, 0x0, 0x80000001, 0x40, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x9800, 0x7, 0x200800, 0x9, 0x9, 0x2, 0x6, 0x0, 0xe1, 0x0, 0x7}, 0x0, 0x8, r1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101a0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000005c0)=r10, 0x12) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="18bbeca62401a516cf6a161d7019282782e73bf8ac78d05a90864c74644de71c2e0e3c9e4a7122ebe37badf383e83f2d75741d856759f44457eede6f34e3ee1028e2971dd6167cc0de2be6c39a860355dffeca2afe1b98a71a1b71ecf1154e144b542c5098bcb2a4ac70d467e820433357876a38ea19142bcd03b0182828a4614a23dfffac0988ae9352902b6503d054ffafe8e5b6", 0x95}], 0x1, &(0x7f00000009c0)=[@rights={{0x20, 0x1, 0x1, [r7, r1, r7, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, r8]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r4, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r1, r7]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r8, r6, r3, r5, r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}], 0x140, 0x20000000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 2.174461452s ago: executing program 4 (id=17186): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 2.163809352s ago: executing program 1 (id=17187): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001980)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x3, 0x7, 0x0, 0x4000000, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x36, 0x0, 0x0) 1.850347052s ago: executing program 3 (id=17188): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a800160020035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e000000000000", 0xd7}], 0x1}, 0x24000854) 1.804620773s ago: executing program 4 (id=17189): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x6, &(0x7f0000000240), 0x4) 1.743591155s ago: executing program 0 (id=17190): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18e102, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x86e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0001", 0x23}], 0x1}, 0x0) 1.730985645s ago: executing program 1 (id=17191): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x8, 0x2, 0xd0, 0x5, 0x0, 0x1, 0x84016, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000200)}, 0x10888, 0x3, 0xe12f, 0x8, 0x400, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, r1, 0x9, r0, 0x8) r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x1, 0x8, 0x7, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x202, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x1}, r2, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xd, &(0x7f00000000c0), 0x4f) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x600a82, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.712300086s ago: executing program 3 (id=17192): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0xffffffff, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, 0x0) ioctl$TUNATTACHFILTER(r0, 0x5451, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080), 0xbf28fa041556e426) 1.684676367s ago: executing program 2 (id=17193): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 1.58871582s ago: executing program 4 (id=17194): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x42) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000edffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014005800b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000000000"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f00000001c0)="817d5cc2bf2591bbc55db98da06af93ad8e352de5817daedaa66c11485d6740b4733ac2d4234a9aacdfa6e81f00fb4ddc7efc73c18dfeeea84df1e92a6066eaff2850ddae70d75b85394f1e214e986cb9a60bf5fc3ae6d9e97d64915a7254547822c2374b553ac91b29a835275d3686f5ac1a0ba7fede7d19ac29605bd66e01b8648b5c5a90d49af8ab7f8d71c3aa739ea726b3ce9572695657bd8e01a75a7c8f1ae0b6077360dfbfd11641a3e8d10b58b4b0dd762ab1b99dc053ba481022944dae4575b22174b2f349b29a073298d8837368e318f", &(0x7f00000002c0)=""/163, &(0x7f0000000380)="fb0704f7b5491d993585ac0c0d6ff49d463d4394", &(0x7f0000000440)="04fcf097ed3346c97013f85a38f8beaaa051eba5f6ff0d15b0e0a3529ac72a3e5f8b36f5bc16fee02e9ee68c9c8773668418d896c625b883c5b89f9f28a0bb8207db4415e2199b0fb7946eaff31eae02fba0ec40a9993e1769a4c66511304fc30420b14ff9cdb7e3edaf66be534a77bf44d274511d21cfe0afb8c7fd344f48f0f597a00fdd8b7c0ccf90840c60d84621910385cf65cb7a8caf98e76a9a889fc788f67308517eda5f7cc2f899c2f04e766b24e6ec757b88bb191d2c477ca26e35c12b4263af365f70c927b5dfea7ff508ec77c0d3c518038f86f33d1bea8faa9fe9aaf9db176c61f4697856b21fb1990294628ddbc89c28b1f83577c3599dd2", 0x9, r3, 0x4}, 0x38) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac0080002000700020025", 0x2d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) 1.527776292s ago: executing program 3 (id=17195): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f0000000000)="660f829e3add48b0", 0x7}, {&(0x7f0000000800)="ad8c9ca6cf1b", 0x1c}], 0x3}, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x7, 0x8, 0x9, 0xff, 0x0, 0x80000001, 0x40, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x9800, 0x7, 0x200800, 0x9, 0x9, 0x2, 0x6, 0x0, 0xe1, 0x0, 0x7}, 0x0, 0x8, r1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101a0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000005c0)=r10, 0x12) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="18bbeca62401a516cf6a161d7019282782e73bf8ac78d05a90864c74644de71c2e0e3c9e4a7122ebe37badf383e83f2d75741d856759f44457eede6f34e3ee1028e2971dd6167cc0de2be6c39a860355dffeca2afe1b98a71a1b71ecf1154e144b542c5098bcb2a4ac70d467e820433357876a38ea19142bcd03b0182828a4614a23dfffac0988ae9352902b6503d054ffafe8e5b6", 0x95}], 0x1, &(0x7f00000009c0)=[@rights={{0x20, 0x1, 0x1, [r7, r1, r7, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, r8]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r4, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r1, r7]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r8, r6, r3, r5, r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}], 0x140, 0x20000000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 1.333167418s ago: executing program 0 (id=17196): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x8, 0x2, 0xd0, 0x5, 0x0, 0x1, 0x84016, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000200)}, 0x10888, 0x3, 0xe12f, 0x8, 0x400, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, r1, 0x9, 0xffffffffffffffff, 0x8) r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x1, 0x8, 0x7, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x202, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x1}, r2, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xd, &(0x7f00000000c0), 0x4f) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 644.53522ms ago: executing program 0 (id=17197): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 633.38148ms ago: executing program 1 (id=17198): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 631.7449ms ago: executing program 3 (id=17208): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x8, 0x2, 0xd0, 0x5, 0x0, 0x1, 0x84016, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000200)}, 0x10888, 0x3, 0xe12f, 0x8, 0x400, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, r1, 0x9, r0, 0x8) r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x1, 0x8, 0x7, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x202, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x1}, r2, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xd, &(0x7f00000000c0), 0x4f) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x600a82, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x30, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 630.67672ms ago: executing program 4 (id=17199): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x42) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000edffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014005800b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000000000"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f00000001c0)="817d5cc2bf2591bbc55db98da06af93ad8e352de5817daedaa66c11485d6740b4733ac2d4234a9aacdfa6e81f00fb4ddc7efc73c18dfeeea84df1e92a6066eaff2850ddae70d75b85394f1e214e986cb9a60bf5fc3ae6d9e97d64915a7254547822c2374b553ac91b29a835275d3686f5ac1a0ba7fede7d19ac29605bd66e01b8648b5c5a90d49af8ab7f8d71c3aa739ea726b3ce9572695657bd8e01a75a7c8f1ae0b6077360dfbfd11641a3e8d10b58b4b0dd762ab1b99dc053ba481022944dae4575b22174b2f349b29a073298d8837368e318f", &(0x7f00000002c0)=""/163, &(0x7f0000000380)="fb0704f7b5491d993585ac0c0d6ff49d463d4394", &(0x7f0000000440)="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", 0x9, r3, 0x4}, 0x38) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) 621.567261ms ago: executing program 2 (id=17200): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) r2 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 417.692877ms ago: executing program 0 (id=17201): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001980)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x3, 0x7, 0x0, 0x4000000, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x36, 0x0, 0x0) 350.847859ms ago: executing program 1 (id=17202): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200fe80000000000000080005007a010401a800160020035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e000000000000", 0xd7}], 0x1}, 0x24000854) 265.220271ms ago: executing program 4 (id=17203): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f0000000000)="660f829e3add48b0", 0x7}, {&(0x7f0000000800)="ad8c9ca6cf1b", 0x1c}], 0x3}, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x7, 0x8, 0x9, 0xff, 0x0, 0x80000001, 0x40, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x9800, 0x7, 0x200800, 0x9, 0x9, 0x2, 0x6, 0x0, 0xe1, 0x0, 0x7}, 0x0, 0x8, r1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101a0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000005c0)=r10, 0x12) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="18bbeca62401a516cf6a161d7019282782e73bf8ac78d05a90864c74644de71c2e0e3c9e4a7122ebe37badf383e83f2d75741d856759f44457eede6f34e3ee1028e2971dd6167cc0de2be6c39a860355dffeca2afe1b98a71a1b71ecf1154e144b542c5098bcb2a4ac70d467e820433357876a38ea19142bcd03b0182828a4614a23dfffac0988ae9352902b6503d054ffafe8e5b6", 0x95}], 0x1, &(0x7f00000009c0)=[@rights={{0x20, 0x1, 0x1, [r7, r1, r7, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, r8]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r4, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r1, r7]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r8, r6, r3, r5, r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}], 0x140, 0x20000000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 7.83856ms ago: executing program 1 (id=17204): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r6 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5411, 0x0) 0s ago: executing program 0 (id=17205): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0xffffffff, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, 0x0) ioctl$TUNATTACHFILTER(r0, 0x5451, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0xbf28fa041556e426) kernel console output (not intermixed with test programs): 346][T18463] ? __sys_sendmsg+0x290/0x290 [ 2358.901146][T18463] ? __lock_acquire+0x7d10/0x7d10 [ 2358.906208][T18463] __se_sys_sendmsg+0x1bb/0x2a0 [ 2358.911100][T18463] ? __x64_sys_sendmsg+0x80/0x80 [ 2358.916087][T18463] ? lockdep_hardirqs_on+0x94/0x140 [ 2358.921305][T18463] do_syscall_64+0x4c/0xa0 [ 2358.925749][T18463] ? clear_bhb_loop+0x60/0xb0 [ 2358.930441][T18463] ? clear_bhb_loop+0x60/0xb0 [ 2358.935135][T18463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2358.941052][T18463] RIP: 0033:0x7f98ee59ce59 [ 2358.945496][T18463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2358.965115][T18463] RSP: 002b:00007f98ef4a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2358.973540][T18463] RAX: ffffffffffffffda RBX: 00007f98ee815fa0 RCX: 00007f98ee59ce59 [ 2358.981523][T18463] RDX: 0000000020008800 RSI: 0000200000000600 RDI: 0000000000000003 [ 2358.989507][T18463] RBP: 00007f98ef4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2358.997489][T18463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2359.005471][T18463] R13: 00007f98ee816038 R14: 00007f98ee815fa0 R15: 00007ffea6461bb8 [ 2359.013461][T18463] [ 2359.595815][T18485] netlink: 'syz.0.15545': attribute type 10 has an invalid length. [ 2359.930909][T18493] netlink: 'syz.0.15550': attribute type 10 has an invalid length. [ 2360.077214][T18506] FAULT_INJECTION: forcing a failure. [ 2360.077214][T18506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2360.117723][T18506] CPU: 0 PID: 18506 Comm: syz.0.15554 Not tainted syzkaller #0 [ 2360.125318][T18506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2360.135420][T18506] Call Trace: [ 2360.138735][T18506] [ 2360.141688][T18506] dump_stack_lvl+0x188/0x24e [ 2360.146405][T18506] ? show_regs_print_info+0x12/0x12 [ 2360.151646][T18506] ? load_image+0x400/0x400 [ 2360.156197][T18506] ? __lock_acquire+0x7d10/0x7d10 [ 2360.161263][T18506] should_fail_ex+0x399/0x4d0 [ 2360.165976][T18506] _copy_from_user+0x2c/0x170 [ 2360.170690][T18506] __copy_msghdr+0x3b7/0x580 [ 2360.175328][T18506] ___sys_sendmsg+0x210/0x360 [ 2360.180048][T18506] ? __sys_sendmsg+0x290/0x290 [ 2360.184863][T18506] ? __lock_acquire+0x7d10/0x7d10 [ 2360.189929][T18506] __se_sys_sendmsg+0x1bb/0x2a0 [ 2360.194802][T18506] ? __x64_sys_sendmsg+0x80/0x80 [ 2360.199768][T18506] ? lockdep_hardirqs_on+0x94/0x140 [ 2360.204983][T18506] do_syscall_64+0x4c/0xa0 [ 2360.209418][T18506] ? clear_bhb_loop+0x60/0xb0 [ 2360.214113][T18506] ? clear_bhb_loop+0x60/0xb0 [ 2360.218817][T18506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2360.224727][T18506] RIP: 0033:0x7f606f19ce59 [ 2360.229169][T18506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2360.248800][T18506] RSP: 002b:00007f6070133028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2360.257223][T18506] RAX: ffffffffffffffda RBX: 00007f606f415fa0 RCX: 00007f606f19ce59 [ 2360.265214][T18506] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2360.273197][T18506] RBP: 00007f6070133090 R08: 0000000000000000 R09: 0000000000000000 [ 2360.281175][T18506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2360.289165][T18506] R13: 00007f606f416038 R14: 00007f606f415fa0 R15: 00007ffd98ee6e48 [ 2360.297158][T18506] [ 2360.401070][T18513] netlink: 'syz.2.15555': attribute type 10 has an invalid length. [ 2360.426626][T18513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15555'. [ 2360.462466][T18513] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2360.489432][T18513] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2360.544461][T18513] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2360.809062][T18521] netlink: 'syz.0.15558': attribute type 29 has an invalid length. [ 2360.838997][T18521] netlink: 'syz.0.15558': attribute type 29 has an invalid length. [ 2360.862357][T18527] netlink: 'syz.0.15558': attribute type 29 has an invalid length. [ 2361.057475][T18531] netlink: 'syz.3.15562': attribute type 10 has an invalid length. [ 2361.324134][T18531] team0: Port device macvlan1 added [ 2362.525154][T18573] netlink: 'syz.4.15576': attribute type 10 has an invalid length. [ 2364.110869][T18621] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.15596'. [ 2365.545948][T18649] netlink: 'syz.2.15603': attribute type 29 has an invalid length. [ 2365.582473][T18649] netlink: 'syz.2.15603': attribute type 29 has an invalid length. [ 2365.609135][T18650] netlink: 'syz.2.15603': attribute type 29 has an invalid length. [ 2366.444370][T18668] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.15611'. [ 2367.421508][T18695] netlink: 'syz.3.15620': attribute type 29 has an invalid length. [ 2367.471919][T18695] netlink: 'syz.3.15620': attribute type 29 has an invalid length. [ 2367.589724][T18700] netlink: 'syz.3.15620': attribute type 29 has an invalid length. [ 2368.686867][T18725] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15631'. [ 2370.567893][T18753] netlink: 140 bytes leftover after parsing attributes in process `syz.1.15640'. [ 2370.583083][T18753] netlink: 10 bytes leftover after parsing attributes in process `syz.1.15640'. [ 2372.237756][T18753] bond0: (slave bond_slave_0): Releasing backup interface [ 2372.276373][T18753] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2372.430920][T18755] netlink: 'syz.4.15641': attribute type 25 has an invalid length. [ 2372.953525][T18778] netlink: 140 bytes leftover after parsing attributes in process `syz.2.15649'. [ 2372.962821][T18778] netlink: 10 bytes leftover after parsing attributes in process `syz.2.15649'. [ 2372.997988][T18778] bond0: (slave bond_slave_0): Releasing backup interface [ 2373.071835][T18778] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2373.246148][T18787] netlink: 'syz.3.15653': attribute type 10 has an invalid length. [ 2373.479052][T18798] netlink: 'syz.1.15656': attribute type 25 has an invalid length. [ 2373.774250][T18807] device virt_wifi0 entered promiscuous mode [ 2374.612729][T18833] netlink: 'syz.0.15667': attribute type 10 has an invalid length. [ 2374.931026][T18845] netlink: 'syz.2.15671': attribute type 25 has an invalid length. [ 2375.404503][T18862] FAULT_INJECTION: forcing a failure. [ 2375.404503][T18862] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.442611][T18862] CPU: 0 PID: 18862 Comm: syz.4.15681 Not tainted syzkaller #0 [ 2375.450203][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2375.460287][T18862] Call Trace: [ 2375.463589][T18862] [ 2375.466592][T18862] dump_stack_lvl+0x188/0x24e [ 2375.471315][T18862] ? show_regs_print_info+0x12/0x12 [ 2375.476552][T18862] ? load_image+0x400/0x400 [ 2375.481104][T18862] ? __might_sleep+0xd0/0xd0 [ 2375.485734][T18862] ? __lock_acquire+0x7d10/0x7d10 [ 2375.490808][T18862] should_fail_ex+0x399/0x4d0 [ 2375.495523][T18862] should_failslab+0x5/0x20 [ 2375.500055][T18862] slab_pre_alloc_hook+0x59/0x310 [ 2375.505111][T18862] ? br_netlink_fini+0x30/0x30 [ 2375.509917][T18862] kmem_cache_alloc_node+0x5a/0x320 [ 2375.515159][T18862] ? __alloc_skb+0xfc/0x7e0 [ 2375.519708][T18862] __alloc_skb+0xfc/0x7e0 [ 2375.524079][T18862] rtmsg_ifinfo_build_skb+0x80/0x190 [ 2375.529409][T18862] rtnetlink_event+0xd1/0x1a0 [ 2375.534126][T18862] raw_notifier_call_chain+0xcb/0x160 [ 2375.539542][T18862] dev_set_mtu_ext+0x45f/0x680 [ 2375.544370][T18862] ? dev_validate_mtu+0x170/0x170 [ 2375.549438][T18862] ? __mutex_trylock_common+0x155/0x260 [ 2375.555021][T18862] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2375.561219][T18862] dev_set_mtu+0x41/0xc0 [ 2375.565501][T18862] dev_ifsioc+0x443/0xd40 [ 2375.569871][T18862] ? dev_ioctl+0xe80/0xe80 [ 2375.574318][T18862] ? apparmor_capable+0x12c/0x190 [ 2375.579418][T18862] ? full_name_hash+0x8e/0xe0 [ 2375.584130][T18862] ? dev_load+0x1d/0x1e0 [ 2375.588400][T18862] ? dev_load+0x1d/0x1e0 [ 2375.592681][T18862] dev_ioctl+0x55e/0xe80 [ 2375.596964][T18862] sock_do_ioctl+0x245/0x320 [ 2375.601644][T18862] ? sock_show_fdinfo+0xb0/0xb0 [ 2375.606537][T18862] sock_ioctl+0x4d2/0x710 [ 2375.610907][T18862] ? sock_poll+0x410/0x410 [ 2375.615376][T18862] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2375.620348][T18862] ? security_file_ioctl+0x7c/0xa0 [ 2375.625489][T18862] ? sock_poll+0x410/0x410 [ 2375.629920][T18862] __se_sys_ioctl+0xfa/0x170 [ 2375.634533][T18862] do_syscall_64+0x4c/0xa0 [ 2375.638969][T18862] ? clear_bhb_loop+0x60/0xb0 [ 2375.643666][T18862] ? clear_bhb_loop+0x60/0xb0 [ 2375.648360][T18862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2375.654269][T18862] RIP: 0033:0x7f532d99ce59 [ 2375.658695][T18862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2375.678310][T18862] RSP: 002b:00007f532e93c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2375.686789][T18862] RAX: ffffffffffffffda RBX: 00007f532dc15fa0 RCX: 00007f532d99ce59 [ 2375.694786][T18862] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000004 [ 2375.702792][T18862] RBP: 00007f532e93c090 R08: 0000000000000000 R09: 0000000000000000 [ 2375.710777][T18862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2375.718757][T18862] R13: 00007f532dc16038 R14: 00007f532dc15fa0 R15: 00007ffd933b9518 [ 2375.726758][T18862] [ 2376.363672][T18890] netlink: 'syz.0.15688': attribute type 25 has an invalid length. [ 2376.721016][T18906] netlink: 'syz.0.15693': attribute type 21 has an invalid length. [ 2376.730908][T18906] netlink: 'syz.0.15693': attribute type 11 has an invalid length. [ 2379.964624][T18959] netlink: 'syz.3.15707': attribute type 10 has an invalid length. [ 2380.207041][T18973] netlink: 'syz.0.15714': attribute type 10 has an invalid length. [ 2380.220850][T18973] netlink: 'syz.0.15714': attribute type 21 has an invalid length. [ 2380.231173][T18973] netlink: 100 bytes leftover after parsing attributes in process `syz.0.15714'. [ 2381.086987][T18988] netlink: 'syz.3.15723': attribute type 29 has an invalid length. [ 2381.117518][T18988] netlink: 'syz.3.15723': attribute type 29 has an invalid length. [ 2381.265858][T18994] netlink: 'syz.3.15723': attribute type 29 has an invalid length. [ 2381.290652][T18995] netlink: 'syz.0.15725': attribute type 10 has an invalid length. [ 2381.333845][T18988] netlink: 'syz.3.15723': attribute type 29 has an invalid length. [ 2381.387304][T19000] netlink: 'syz.3.15723': attribute type 29 has an invalid length. [ 2382.071278][T19017] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.15730'. [ 2382.801168][T19029] netlink: 'syz.2.15732': attribute type 21 has an invalid length. [ 2385.258836][T19066] validate_nla: 1 callbacks suppressed [ 2385.258852][T19066] netlink: 'syz.1.15746': attribute type 25 has an invalid length. [ 2385.484767][T19075] netlink: 'syz.3.15748': attribute type 21 has an invalid length. [ 2385.503397][T19075] netlink: 'syz.3.15748': attribute type 11 has an invalid length. [ 2387.837869][T19095] device hsr0 entered promiscuous mode [ 2388.132410][T19107] netlink: 'syz.1.15761': attribute type 25 has an invalid length. [ 2388.302565][T19119] netlink: 'syz.0.15776': attribute type 25 has an invalid length. [ 2388.648869][T19130] netlink: 'syz.2.15764': attribute type 10 has an invalid length. [ 2388.670634][T19130] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15764'. [ 2388.682421][T19130] device hsr0 entered promiscuous mode [ 2388.692877][T19130] bridge0: port 4(hsr0) entered blocking state [ 2388.702797][T19130] bridge0: port 4(hsr0) entered disabled state [ 2388.712011][T19130] bridge0: port 4(hsr0) entered blocking state [ 2388.718284][T19130] bridge0: port 4(hsr0) entered forwarding state [ 2388.845831][T19133] netlink: 'syz.1.15768': attribute type 21 has an invalid length. [ 2388.875537][T19133] netlink: 'syz.1.15768': attribute type 11 has an invalid length. [ 2389.655069][T19160] device syzkaller0 entered promiscuous mode [ 2395.759415][T19214] netlink: 'syz.4.15792': attribute type 21 has an invalid length. [ 2395.790018][T19214] netlink: 'syz.4.15792': attribute type 11 has an invalid length. [ 2396.028400][T19221] netlink: 'syz.3.15797': attribute type 10 has an invalid length. [ 2396.048427][T19219] netlink: 'syz.0.15796': attribute type 10 has an invalid length. [ 2396.182361][T19225] netlink: 'syz.2.15799': attribute type 10 has an invalid length. [ 2396.214148][T19225] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15799'. [ 2396.268720][T19232] netlink: 'syz.1.15800': attribute type 25 has an invalid length. [ 2399.798443][T19260] netlink: 'syz.2.15812': attribute type 10 has an invalid length. [ 2400.014676][T19267] netlink: 'syz.1.15813': attribute type 10 has an invalid length. [ 2400.083883][T19272] netlink: 'syz.2.15816': attribute type 25 has an invalid length. [ 2400.259330][T19276] netlink: 'syz.0.15827': attribute type 10 has an invalid length. [ 2400.418349][T19288] device lo entered promiscuous mode [ 2403.734736][T19303] netlink: 'syz.0.15825': attribute type 10 has an invalid length. [ 2404.080320][T19314] FAULT_INJECTION: forcing a failure. [ 2404.080320][T19314] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.132606][T19314] CPU: 1 PID: 19314 Comm: syz.3.15829 Not tainted syzkaller #0 [ 2404.140300][T19314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2404.150409][T19314] Call Trace: [ 2404.153713][T19314] [ 2404.156671][T19314] dump_stack_lvl+0x188/0x24e [ 2404.161438][T19314] ? show_regs_print_info+0x12/0x12 [ 2404.166685][T19314] ? load_image+0x400/0x400 [ 2404.171238][T19314] ? __stack_depot_save+0x35/0x460 [ 2404.176393][T19314] ? mark_lock+0x94/0x320 [ 2404.180762][T19314] ? verify_lock_unused+0x140/0x140 [ 2404.186010][T19314] should_fail_ex+0x399/0x4d0 [ 2404.190729][T19314] should_failslab+0x5/0x20 [ 2404.195263][T19314] slab_pre_alloc_hook+0x59/0x310 [ 2404.200328][T19314] ? tipc_conn_alloc+0x57/0x4a0 [ 2404.205217][T19314] __kmem_cache_alloc_node+0x4f/0x260 [ 2404.210629][T19314] ? tipc_conn_alloc+0x57/0x4a0 [ 2404.215516][T19314] kmalloc_trace+0x26/0xe0 [ 2404.219976][T19314] tipc_conn_alloc+0x57/0x4a0 [ 2404.224697][T19314] tipc_topsrv_kern_subscr+0xf5/0x250 [ 2404.230121][T19314] ? conn_put+0x310/0x310 [ 2404.234484][T19314] ? tipc_own_addr+0x45/0x2a0 [ 2404.239196][T19314] ? tipc_own_addr+0x45/0x2a0 [ 2404.243919][T19314] tipc_group_create+0x360/0x4f0 [ 2404.248896][T19314] tipc_sk_join+0x24f/0x6a0 [ 2404.253437][T19314] ? __tipc_sendstream+0x12f0/0x12f0 [ 2404.258789][T19314] ? do_raw_spin_unlock+0x81/0x230 [ 2404.263936][T19314] tipc_setsockopt+0x6bf/0x960 [ 2404.268737][T19314] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2404.274938][T19314] ? tipc_shutdown+0x560/0x560 [ 2404.279750][T19314] ? tipc_shutdown+0x560/0x560 [ 2404.284562][T19314] __sys_setsockopt+0x2bf/0x3d0 [ 2404.289157][T19318] netlink: 'syz.0.15831': attribute type 25 has an invalid length. [ 2404.289463][T19314] __x64_sys_setsockopt+0xb1/0xc0 [ 2404.302406][T19314] do_syscall_64+0x4c/0xa0 [ 2404.306864][T19314] ? clear_bhb_loop+0x60/0xb0 [ 2404.311596][T19314] ? clear_bhb_loop+0x60/0xb0 [ 2404.316295][T19314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2404.322214][T19314] RIP: 0033:0x7f98ee59ce59 [ 2404.326641][T19314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2404.346264][T19314] RSP: 002b:00007f98ef4a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2404.354688][T19314] RAX: ffffffffffffffda RBX: 00007f98ee815fa0 RCX: 00007f98ee59ce59 [ 2404.362672][T19314] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 2404.370655][T19314] RBP: 00007f98ef4a5090 R08: 0000000000000043 R09: 0000000000000000 [ 2404.378639][T19314] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 2404.386622][T19314] R13: 00007f98ee816038 R14: 00007f98ee815fa0 R15: 00007ffea6461bb8 [ 2404.394616][T19314] [ 2404.415426][T19316] netlink: 'syz.2.15830': attribute type 10 has an invalid length. [ 2404.509531][T19314] netlink: 'syz.3.15829': attribute type 10 has an invalid length. [ 2404.532133][T19314] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15829'. [ 2404.585660][T19314] device hsr0 entered promiscuous mode [ 2404.661454][T19314] bridge0: port 3(hsr0) entered blocking state [ 2404.684398][T19314] bridge0: port 3(hsr0) entered disabled state [ 2404.786108][T19314] bridge0: port 3(hsr0) entered blocking state [ 2404.792498][T19314] bridge0: port 3(hsr0) entered forwarding state [ 2404.848349][T19326] netlink: 'syz.1.15834': attribute type 10 has an invalid length. [ 2405.419064][T19353] netlink: 'syz.0.15843': attribute type 21 has an invalid length. [ 2405.453327][T19353] netlink: 'syz.0.15843': attribute type 11 has an invalid length. [ 2405.608217][T19357] netlink: 'syz.2.15845': attribute type 25 has an invalid length. [ 2405.787170][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.796163][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.840416][ T4224] device hsr_slave_0 left promiscuous mode [ 2405.903347][ T4224] device hsr_slave_1 left promiscuous mode [ 2405.961337][ T4224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2405.978732][T19364] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15848'. [ 2405.992682][ T4224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2406.040835][ T4224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2406.059976][ T4224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2406.096383][ T4224] batman_adv: batadv0: Interface deactivated: vlan1 [ 2406.103059][ T4224] batman_adv: batadv0: Removing interface: vlan1 [ 2406.122437][ T4224] bridge0: port 4(hsr0) entered disabled state [ 2406.152947][ T4224] bridge0: port 3(team0) entered disabled state [ 2406.169176][ T4224] device bridge_slave_0 left promiscuous mode [ 2406.196060][ T4224] bridge0: port 1(bridge_slave_0) entered disabled state [ 2406.285137][ T4224] device veth0_vlan left promiscuous mode [ 2406.699906][ T4224] device macvlan1 left promiscuous mode [ 2406.709867][ T4224] team0 (unregistering): Port device macvlan1 removed [ 2406.984325][ T4224] device team_slave_1 left promiscuous mode [ 2406.992112][ T4224] team0 (unregistering): Port device team_slave_1 removed [ 2407.070360][ T4224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2407.079502][ T4224] device bond_slave_1 left promiscuous mode [ 2407.167937][ T4224] device bridge_slave_1 left promiscuous mode [ 2407.175596][ T4224] team0 (unregistering): Port device bridge_slave_1 removed [ 2407.351207][ T4224] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2407.360284][ T4224] device batadv0 left promiscuous mode [ 2407.437800][ T4224] bond0 (unregistering): Released all slaves [ 2407.526478][T19374] netlink: 'syz.1.15851': attribute type 10 has an invalid length. [ 2407.535306][T19374] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15851'. [ 2407.545631][T19374] bridge0: port 4(hsr0) entered blocking state [ 2407.552103][T19374] bridge0: port 4(hsr0) entered disabled state [ 2407.561019][T19374] bridge0: port 4(hsr0) entered blocking state [ 2407.567324][T19374] bridge0: port 4(hsr0) entered forwarding state [ 2407.863241][T21573] Bluetooth: hci2: command 0x0406 tx timeout [ 2407.897629][T19393] netlink: 'syz.0.15858': attribute type 25 has an invalid length. [ 2408.436404][T19408] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2408.470710][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15865'. [ 2408.775570][T19418] netlink: 'syz.1.15868': attribute type 21 has an invalid length. [ 2408.797785][T19418] netlink: 'syz.1.15868': attribute type 11 has an invalid length. [ 2410.583549][ T4224] wlan1: Trigger new scan to find an IBSS to join [ 2410.786501][T19441] netlink: 'syz.1.15873': attribute type 25 has an invalid length. [ 2410.887305][T19442] netlink: 'syz.0.15874': attribute type 10 has an invalid length. [ 2411.031932][T19451] FAULT_INJECTION: forcing a failure. [ 2411.031932][T19451] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.056213][T19451] CPU: 1 PID: 19451 Comm: syz.1.15879 Not tainted syzkaller #0 [ 2411.063823][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2411.073903][T19451] Call Trace: [ 2411.077216][T19451] [ 2411.080184][T19451] dump_stack_lvl+0x188/0x24e [ 2411.084919][T19451] ? show_regs_print_info+0x12/0x12 [ 2411.090170][T19451] ? load_image+0x400/0x400 [ 2411.094712][T19451] ? __might_sleep+0xd0/0xd0 [ 2411.099331][T19451] ? __lock_acquire+0x7d10/0x7d10 [ 2411.104416][T19451] should_fail_ex+0x399/0x4d0 [ 2411.109128][T19451] should_failslab+0x5/0x20 [ 2411.113658][T19451] slab_pre_alloc_hook+0x59/0x310 [ 2411.118717][T19451] ? exc_page_fault+0x88/0x100 [ 2411.123508][T19451] ? sk_prot_alloc+0xe7/0x210 [ 2411.128243][T19451] __kmem_cache_alloc_node+0x4f/0x260 [ 2411.133653][T19451] ? exc_page_fault+0x88/0x100 [ 2411.138455][T19451] ? sk_prot_alloc+0xe7/0x210 [ 2411.143170][T19451] __kmalloc+0xa0/0x240 [ 2411.147390][T19451] sk_prot_alloc+0xe7/0x210 [ 2411.151978][T19451] ? sk_alloc+0x20/0x340 [ 2411.156252][T19451] sk_alloc+0x36/0x340 [ 2411.160379][T19451] ? bpf_ctx_init+0x163/0x1a0 [ 2411.165127][T19451] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 2411.170706][T19451] bpf_prog_test_run_skb+0x35e/0x12a0 [ 2411.176112][T19451] ? __fget_files+0x28/0x4b0 [ 2411.180739][T19451] ? __fget_files+0x43d/0x4b0 [ 2411.185447][T19451] ? cpu_online+0xa0/0xa0 [ 2411.189792][T19451] bpf_prog_test_run+0x31e/0x390 [ 2411.194750][T19451] __sys_bpf+0x62b/0x780 [ 2411.199013][T19451] ? bpf_link_show_fdinfo+0x380/0x380 [ 2411.204413][T19451] ? lock_chain_count+0x20/0x20 [ 2411.209280][T19451] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2411.215290][T19451] __x64_sys_bpf+0x78/0x90 [ 2411.219730][T19451] do_syscall_64+0x4c/0xa0 [ 2411.224167][T19451] ? clear_bhb_loop+0x60/0xb0 [ 2411.228860][T19451] ? clear_bhb_loop+0x60/0xb0 [ 2411.233559][T19451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2411.239468][T19451] RIP: 0033:0x7f01db59ce59 [ 2411.243892][T19451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2411.263517][T19451] RSP: 002b:00007f01dc3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2411.271944][T19451] RAX: ffffffffffffffda RBX: 00007f01db815fa0 RCX: 00007f01db59ce59 [ 2411.279927][T19451] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2411.287916][T19451] RBP: 00007f01dc3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 2411.295899][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2411.303879][T19451] R13: 00007f01db816038 R14: 00007f01db815fa0 R15: 00007ffe3b33dfe8 [ 2411.311871][T19451] [ 2411.420017][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15883'. [ 2411.443202][T19460] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2411.458482][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15881'. [ 2411.670287][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15884'. [ 2412.188670][T19485] FAULT_INJECTION: forcing a failure. [ 2412.188670][T19485] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.272670][T19487] netlink: 'syz.2.15890': attribute type 25 has an invalid length. [ 2412.281328][T19485] CPU: 0 PID: 19485 Comm: syz.3.15889 Not tainted syzkaller #0 [ 2412.288927][T19485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2412.299002][T19485] Call Trace: [ 2412.302299][T19485] [ 2412.305241][T19485] dump_stack_lvl+0x188/0x24e [ 2412.309968][T19485] ? show_regs_print_info+0x12/0x12 [ 2412.315190][T19485] ? load_image+0x400/0x400 [ 2412.319710][T19485] ? __might_sleep+0xd0/0xd0 [ 2412.324315][T19485] ? __lock_acquire+0x7d10/0x7d10 [ 2412.329362][T19485] should_fail_ex+0x399/0x4d0 [ 2412.334061][T19485] should_failslab+0x5/0x20 [ 2412.338574][T19485] slab_pre_alloc_hook+0x59/0x310 [ 2412.343613][T19485] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2412.349370][T19485] __kmem_cache_alloc_node+0x4f/0x260 [ 2412.354763][T19485] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2412.360504][T19485] __kmalloc+0xa0/0x240 [ 2412.364715][T19485] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2412.370290][T19485] ? tomoyo_path_number_perm+0x205/0x650 [ 2412.375989][T19485] tomoyo_path_number_perm+0x22f/0x650 [ 2412.381471][T19485] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2412.386960][T19485] ? ksys_write+0x1c0/0x250 [ 2412.391483][T19485] ? common_file_perm+0x171/0x1c0 [ 2412.396561][T19485] ? __fget_files+0x28/0x4b0 [ 2412.401165][T19485] ? __fget_files+0x28/0x4b0 [ 2412.405794][T19485] security_file_ioctl+0x6c/0xa0 [ 2412.410756][T19485] __se_sys_ioctl+0x48/0x170 [ 2412.415377][T19485] do_syscall_64+0x4c/0xa0 [ 2412.419822][T19485] ? clear_bhb_loop+0x60/0xb0 [ 2412.424526][T19485] ? clear_bhb_loop+0x60/0xb0 [ 2412.429221][T19485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2412.435135][T19485] RIP: 0033:0x7f98ee59ce59 [ 2412.439564][T19485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2412.459178][T19485] RSP: 002b:00007f98ef4a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2412.467604][T19485] RAX: ffffffffffffffda RBX: 00007f98ee815fa0 RCX: 00007f98ee59ce59 [ 2412.475591][T19485] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 2412.483574][T19485] RBP: 00007f98ef4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2412.491554][T19485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2412.499539][T19485] R13: 00007f98ee816038 R14: 00007f98ee815fa0 R15: 00007ffea6461bb8 [ 2412.507538][T19485] [ 2412.783129][T19485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2413.086437][T19495] netlink: 'syz.1.15893': attribute type 10 has an invalid length. [ 2413.386761][T19506] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2413.440927][T19506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15897'. [ 2413.543594][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2413.671996][T19519] netlink: 'syz.4.15900': attribute type 29 has an invalid length. [ 2413.755042][T19519] netlink: 'syz.4.15900': attribute type 29 has an invalid length. [ 2413.823912][T19526] netlink: 'syz.4.15900': attribute type 29 has an invalid length. [ 2413.866884][T19519] netlink: 'syz.4.15900': attribute type 29 has an invalid length. [ 2413.898576][T19524] netlink: 'syz.4.15900': attribute type 29 has an invalid length. [ 2413.996948][T19529] netlink: 'syz.2.15902': attribute type 25 has an invalid length. [ 2415.544226][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 2415.550840][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 2415.740238][T19535] device veth1_macvtap left promiscuous mode [ 2416.316946][T19544] netlink: 'syz.3.15908': attribute type 10 has an invalid length. [ 2416.704743][ T4224] wlan1: Creating new IBSS network, BSSID 06:6b:34:e1:30:1e [ 2417.035196][ T5867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2417.344021][T19558] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2417.505103][T19578] FAULT_INJECTION: forcing a failure. [ 2417.505103][T19578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2417.542124][T19578] CPU: 1 PID: 19578 Comm: syz.3.15915 Not tainted syzkaller #0 [ 2417.549722][T19578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2417.559788][T19578] Call Trace: [ 2417.563084][T19578] [ 2417.566031][T19578] dump_stack_lvl+0x188/0x24e [ 2417.570745][T19578] ? show_regs_print_info+0x12/0x12 [ 2417.575967][T19578] ? load_image+0x400/0x400 [ 2417.580483][T19578] ? __lock_acquire+0x7d10/0x7d10 [ 2417.585537][T19578] should_fail_ex+0x399/0x4d0 [ 2417.590242][T19578] _copy_from_user+0x2c/0x170 [ 2417.594955][T19578] dev_ethtool+0xc2/0x12f0 [ 2417.599394][T19578] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2417.605653][T19578] ? __lock_acquire+0x7d10/0x7d10 [ 2417.610697][T19578] ? __kmem_cache_free+0xb6/0x1f0 [ 2417.615733][T19578] ? full_name_hash+0x8e/0xe0 [ 2417.620418][T19578] ? dev_load+0x1d/0x1e0 [ 2417.624670][T19578] ? dev_load+0x1d/0x1e0 [ 2417.628930][T19578] dev_ioctl+0x474/0xe80 [ 2417.633189][T19578] sock_do_ioctl+0x245/0x320 [ 2417.637789][T19578] ? sock_show_fdinfo+0xb0/0xb0 [ 2417.642658][T19578] sock_ioctl+0x4d2/0x710 [ 2417.646998][T19578] ? sock_poll+0x410/0x410 [ 2417.651430][T19578] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2417.656384][T19578] ? security_file_ioctl+0x7c/0xa0 [ 2417.661512][T19578] ? sock_poll+0x410/0x410 [ 2417.665943][T19578] __se_sys_ioctl+0xfa/0x170 [ 2417.670549][T19578] do_syscall_64+0x4c/0xa0 [ 2417.674982][T19578] ? clear_bhb_loop+0x60/0xb0 [ 2417.679678][T19578] ? clear_bhb_loop+0x60/0xb0 [ 2417.684378][T19578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2417.690283][T19578] RIP: 0033:0x7f98ee59ce59 [ 2417.694729][T19578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2417.714355][T19578] RSP: 002b:00007f98ef484028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2417.722792][T19578] RAX: ffffffffffffffda RBX: 00007f98ee816090 RCX: 00007f98ee59ce59 [ 2417.730778][T19578] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 2417.738762][T19578] RBP: 00007f98ef484090 R08: 0000000000000000 R09: 0000000000000000 [ 2417.746741][T19578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2417.754720][T19578] R13: 00007f98ee816128 R14: 00007f98ee816090 R15: 00007ffea6461bb8 [ 2417.762716][T19578] [ 2417.770281][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2418.005159][T19584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15918'. [ 2418.101582][T19580] netlink: 'syz.0.15916': attribute type 25 has an invalid length. [ 2418.222501][T19584] netlink: 'syz.3.15918': attribute type 13 has an invalid length. [ 2418.253444][T19584] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15918'. [ 2418.389295][T19584] erspan0: refused to change device tx_queue_len [ 2418.422843][T19584] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2418.879533][ T8483] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2419.374391][T19616] netlink: 'syz.3.15927': attribute type 21 has an invalid length. [ 2419.419052][T19616] netlink: 'syz.3.15927': attribute type 11 has an invalid length. [ 2419.572231][ T8483] wlan1: Trigger new scan to find an IBSS to join [ 2420.583592][ T8483] wlan1: Trigger new scan to find an IBSS to join [ 2421.461212][T19633] netlink: 'syz.4.15931': attribute type 25 has an invalid length. [ 2421.482483][T19639] FAULT_INJECTION: forcing a failure. [ 2421.482483][T19639] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.495524][T19639] CPU: 0 PID: 19639 Comm: syz.0.15935 Not tainted syzkaller #0 [ 2421.503113][T19639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2421.513224][T19639] Call Trace: [ 2421.516566][T19639] [ 2421.519568][T19639] dump_stack_lvl+0x188/0x24e [ 2421.524345][T19639] ? show_regs_print_info+0x12/0x12 [ 2421.529624][T19639] ? load_image+0x400/0x400 [ 2421.534196][T19639] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 2421.539926][T19639] should_fail_ex+0x399/0x4d0 [ 2421.544681][T19639] should_failslab+0x5/0x20 [ 2421.549237][T19639] slab_pre_alloc_hook+0x59/0x310 [ 2421.554340][T19639] ? ref_tracker_alloc+0x14e/0x4b0 [ 2421.559535][T19639] __kmem_cache_alloc_node+0x4f/0x260 [ 2421.565019][T19639] ? ref_tracker_alloc+0x14e/0x4b0 [ 2421.570200][T19639] kmalloc_trace+0x26/0xe0 [ 2421.574696][T19639] ref_tracker_alloc+0x14e/0x4b0 [ 2421.579694][T19639] ? __rwlock_init+0x140/0x140 [ 2421.584510][T19639] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2421.590538][T19639] ? ref_tracker_dir_print+0x150/0x150 [ 2421.596035][T19639] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 2421.601526][T19639] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 2421.607020][T19639] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 2421.612530][T19639] ? _raw_spin_lock+0x40/0x40 [ 2421.617271][T19639] ? dev_get_iflink+0x82/0xc0 [ 2421.621986][T19639] ? linkwatch_urgent_event+0x18a/0x3d0 [ 2421.627571][T19639] linkwatch_fire_event+0x1a9/0x210 [ 2421.632810][T19639] ieee80211_ibss_disconnect+0x41b/0x710 [ 2421.638504][T19639] ieee80211_ibss_leave+0x21/0x130 [ 2421.643668][T19639] __cfg80211_leave_ibss+0x1da/0x450 [ 2421.648994][T19639] ? __cfg80211_leave+0x14b/0x410 [ 2421.654077][T19639] cfg80211_netdev_notifier_call+0x4ce/0x14f0 [ 2421.660199][T19639] ? cfg80211_unhold_bss+0xc0/0xc0 [ 2421.665365][T19639] ? perf_trace_lock+0xf8/0x390 [ 2421.670263][T19639] ? trace_event_raw_event_lock+0x250/0x250 [ 2421.676182][T19639] ? mark_lock+0x94/0x320 [ 2421.680594][T19639] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2421.686683][T19639] ? igmp_netdev_event+0x78/0x760 [ 2421.691743][T19639] ? ipmr_device_event+0x1cc/0x1f0 [ 2421.696970][T19639] raw_notifier_call_chain+0xcb/0x160 [ 2421.702421][T19639] __dev_close_many+0x10d/0x2b0 [ 2421.707308][T19639] ? dev_close_many+0x410/0x410 [ 2421.712185][T19639] ? ieee80211_set_multicast_list+0x14f/0x1f0 [ 2421.718345][T19639] __dev_change_flags+0x2d8/0x6a0 [ 2421.723433][T19639] ? dev_get_flags+0x1c0/0x1c0 [ 2421.728239][T19639] ? do_raw_spin_unlock+0x11d/0x230 [ 2421.733479][T19639] dev_change_flags+0x84/0x1a0 [ 2421.738293][T19639] dev_ifsioc+0x130/0xd40 [ 2421.742657][T19639] ? dev_ioctl+0xe80/0xe80 [ 2421.747112][T19639] ? apparmor_capable+0x12c/0x190 [ 2421.752173][T19639] ? full_name_hash+0x8e/0xe0 [ 2421.756883][T19639] ? dev_load+0x1d/0x1e0 [ 2421.761153][T19639] ? dev_load+0x1d/0x1e0 [ 2421.765443][T19639] dev_ioctl+0x55e/0xe80 [ 2421.769736][T19639] sock_do_ioctl+0x245/0x320 [ 2421.774366][T19639] ? sock_show_fdinfo+0xb0/0xb0 [ 2421.779296][T19639] sock_ioctl+0x4d2/0x710 [ 2421.783672][T19639] ? sock_poll+0x410/0x410 [ 2421.788144][T19639] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2421.793125][T19639] ? security_file_ioctl+0x7c/0xa0 [ 2421.798283][T19639] ? sock_poll+0x410/0x410 [ 2421.802729][T19639] __se_sys_ioctl+0xfa/0x170 [ 2421.807364][T19639] do_syscall_64+0x4c/0xa0 [ 2421.811819][T19639] ? clear_bhb_loop+0x60/0xb0 [ 2421.816542][T19639] ? clear_bhb_loop+0x60/0xb0 [ 2421.821256][T19639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2421.827175][T19639] RIP: 0033:0x7f606f19ce59 [ 2421.831625][T19639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2421.851292][T19639] RSP: 002b:00007f6070133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2421.859737][T19639] RAX: ffffffffffffffda RBX: 00007f606f415fa0 RCX: 00007f606f19ce59 [ 2421.867735][T19639] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000004 [ 2421.875730][T19639] RBP: 00007f6070133090 R08: 0000000000000000 R09: 0000000000000000 [ 2421.883737][T19639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2421.891742][T19639] R13: 00007f606f416038 R14: 00007f606f415fa0 R15: 00007ffd98ee6e48 [ 2421.899784][T19639] [ 2421.915245][T13016] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2422.045156][T19635] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2422.065377][T16912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2422.135730][ T5866] device hsr_slave_0 left promiscuous mode [ 2422.168762][ T5866] device hsr_slave_1 left promiscuous mode [ 2422.217440][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2422.233261][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2422.266587][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2422.293184][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2422.852835][ T5866] bridge0: port 4(hsr0) entered disabled state [ 2422.868185][ T5866] bridge0: port 3(team0) entered disabled state [ 2422.888450][ T5866] device bridge_slave_0 left promiscuous mode [ 2422.899606][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 2422.931254][ T5866] device veth0_vlan left promiscuous mode [ 2423.224558][ T5866] device macvlan1 left promiscuous mode [ 2423.234432][ T5866] team0 (unregistering): Port device macvlan1 removed [ 2423.538868][ T5866] device team_slave_1 left promiscuous mode [ 2423.544975][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2423.553273][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 2423.628399][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2423.637528][ T5866] device bond_slave_1 left promiscuous mode [ 2423.708670][ T5866] device bridge_slave_1 left promiscuous mode [ 2423.718178][ T5866] team0 (unregistering): Port device bridge_slave_1 removed [ 2423.905527][ T5866] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2423.914288][ T5866] device batadv0 left promiscuous mode [ 2423.987223][ T5866] bond0 (unregistering): Released all slaves [ 2424.383450][T19664] netlink: 'syz.4.15943': attribute type 21 has an invalid length. [ 2424.391741][T19664] netlink: 'syz.4.15943': attribute type 11 has an invalid length. [ 2424.483979][ T5921] wlan1: Creating new IBSS network, BSSID fe:03:d4:c8:6e:46 [ 2424.505756][ T8483] wlan1: Trigger new scan to find an IBSS to join [ 2424.801666][T19681] netlink: 'syz.4.15947': attribute type 25 has an invalid length. [ 2427.543949][ T4224] wlan1: Trigger new scan to find an IBSS to join [ 2428.228898][T19722] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2428.343213][T16788] Bluetooth: hci4: command 0x0406 tx timeout [ 2428.482769][T19729] device wlan1 entered promiscuous mode [ 2428.491549][T19730] netlink: 'syz.2.15961': attribute type 29 has an invalid length. [ 2428.520404][T19727] netlink: 'syz.1.15960': attribute type 25 has an invalid length. [ 2428.546236][T19730] netlink: 'syz.2.15961': attribute type 29 has an invalid length. [ 2428.591110][T19732] netlink: 'syz.2.15961': attribute type 29 has an invalid length. [ 2428.628941][T19733] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15962'. [ 2428.990238][T19743] netlink: 'syz.3.15967': attribute type 10 has an invalid length. [ 2430.558463][T19768] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2430.576657][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15973'. [ 2431.028056][T19781] netlink: 'syz.1.15976': attribute type 25 has an invalid length. [ 2431.561221][ T5866] device hsr_slave_0 left promiscuous mode [ 2431.587436][ T5866] device hsr_slave_1 left promiscuous mode [ 2431.612874][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2431.640063][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2431.670055][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2431.719544][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2432.094473][ T5866] bridge0: port 3(team0) entered disabled state [ 2432.118871][ T5866] device bridge_slave_0 left promiscuous mode [ 2432.158070][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 2432.220535][ T5866] device veth0_vlan left promiscuous mode [ 2432.541097][ T5866] device macvlan1 left promiscuous mode [ 2432.553055][ T5866] team0 (unregistering): Port device macvlan1 removed [ 2432.584575][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2432.591142][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2432.894363][ T5866] device team_slave_1 left promiscuous mode [ 2432.901494][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 2432.954082][ T5866] device team_slave_0 left promiscuous mode [ 2432.961366][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 2433.004826][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2433.014453][ T5866] device bond_slave_1 left promiscuous mode [ 2433.056790][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2433.065821][ T5866] device bond_slave_0 left promiscuous mode [ 2433.104221][ T5866] device bridge_slave_1 left promiscuous mode [ 2433.111235][ T5866] team0 (unregistering): Port device bridge_slave_1 removed [ 2433.306821][ T5866] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2433.315953][ T5866] device batadv0 left promiscuous mode [ 2433.357682][ T5866] device bond0 left promiscuous mode [ 2433.364719][ T5866] team0 (unregistering): Port device bond0 removed [ 2433.392922][ T5866] bond0 (unregistering): Released all slaves [ 2433.472877][T19804] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2433.491965][T19809] netlink: 'syz.0.15983': attribute type 10 has an invalid length. [ 2433.533493][T19818] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2433.860783][T19828] netlink: 'syz.2.15989': attribute type 25 has an invalid length. [ 2434.321310][T19834] FAULT_INJECTION: forcing a failure. [ 2434.321310][T19834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2434.348468][T19834] CPU: 0 PID: 19834 Comm: syz.0.15991 Not tainted syzkaller #0 [ 2434.356113][T19834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2434.366230][T19834] Call Trace: [ 2434.369537][T19834] [ 2434.372500][T19834] dump_stack_lvl+0x188/0x24e [ 2434.377220][T19834] ? show_regs_print_info+0x12/0x12 [ 2434.382457][T19834] ? load_image+0x400/0x400 [ 2434.386998][T19834] ? __lock_acquire+0x7d10/0x7d10 [ 2434.392060][T19834] ? __kmem_cache_alloc_node+0x140/0x260 [ 2434.397730][T19834] should_fail_ex+0x399/0x4d0 [ 2434.402437][T19834] _copy_from_user+0x2c/0x170 [ 2434.407151][T19834] ___bpf_copy_key+0xb0/0x100 [ 2434.411872][T19834] map_delete_elem+0x1f8/0x570 [ 2434.416668][T19834] ? bpf_lsm_bpf+0x5/0x10 [ 2434.421031][T19834] __sys_bpf+0x51e/0x780 [ 2434.425305][T19834] ? bpf_link_show_fdinfo+0x380/0x380 [ 2434.430728][T19834] ? lock_chain_count+0x20/0x20 [ 2434.435620][T19834] __x64_sys_bpf+0x78/0x90 [ 2434.440074][T19834] do_syscall_64+0x4c/0xa0 [ 2434.444543][T19834] ? clear_bhb_loop+0x60/0xb0 [ 2434.449272][T19834] ? clear_bhb_loop+0x60/0xb0 [ 2434.453986][T19834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2434.459922][T19834] RIP: 0033:0x7f606f19ce59 [ 2434.464380][T19834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2434.484006][T19834] RSP: 002b:00007f6070133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2434.492456][T19834] RAX: ffffffffffffffda RBX: 00007f606f415fa0 RCX: 00007f606f19ce59 [ 2434.500459][T19834] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000003 [ 2434.508470][T19834] RBP: 00007f6070133090 R08: 0000000000000000 R09: 0000000000000000 [ 2434.516483][T19834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2434.524480][T19834] R13: 00007f606f416038 R14: 00007f606f415fa0 R15: 00007ffd98ee6e48 [ 2434.532505][T19834] [ 2435.543767][ T5867] wlan1: Creating new IBSS network, BSSID 7e:92:b4:5d:94:60 [ 2435.551788][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2435.551914][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 2437.406259][T19866] netlink: 'syz.2.16003': attribute type 25 has an invalid length. [ 2437.545087][T19870] device wlan1 entered promiscuous mode [ 2437.696239][T19877] netlink: 'syz.3.16006': attribute type 2 has an invalid length. [ 2437.737655][T19877] netlink: 10 bytes leftover after parsing attributes in process `syz.3.16006'. [ 2439.513762][T19909] netlink: 'syz.4.16019': attribute type 25 has an invalid length. [ 2439.549979][T16912] wlan1: Trigger new scan to find an IBSS to join [ 2439.549994][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 2441.111055][ T6512] wlan1: Creating new IBSS network, BSSID 46:f1:a6:8d:c4:30 [ 2441.119168][T16912] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2442.167661][T19949] netlink: 'syz.2.16030': attribute type 25 has an invalid length. [ 2442.407624][T19955] netlink: 'syz.4.16033': attribute type 12 has an invalid length. [ 2442.458239][T19960] netlink: 'syz.4.16033': attribute type 3 has an invalid length. [ 2442.527931][T19955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16033'. [ 2442.636090][T19960] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16033'. [ 2442.720636][T19962] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2443.436882][T19982] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.16038'. [ 2444.731259][T19993] FAULT_INJECTION: forcing a failure. [ 2444.731259][T19993] name failslab, interval 1, probability 0, space 0, times 0 [ 2444.760670][T19993] CPU: 1 PID: 19993 Comm: syz.2.16044 Not tainted syzkaller #0 [ 2444.768272][T19993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2444.778357][T19993] Call Trace: [ 2444.781686][T19993] [ 2444.784643][T19993] dump_stack_lvl+0x188/0x24e [ 2444.789365][T19993] ? show_regs_print_info+0x12/0x12 [ 2444.794617][T19993] ? load_image+0x400/0x400 [ 2444.799144][T19993] ? __might_sleep+0xd0/0xd0 [ 2444.803749][T19993] ? __lock_acquire+0x7d10/0x7d10 [ 2444.808796][T19993] should_fail_ex+0x399/0x4d0 [ 2444.813494][T19993] should_failslab+0x5/0x20 [ 2444.818013][T19993] slab_pre_alloc_hook+0x59/0x310 [ 2444.823066][T19993] kmem_cache_alloc+0x56/0x2f0 [ 2444.827869][T19993] ? __alloc_file+0x25/0x230 [ 2444.832493][T19993] __alloc_file+0x25/0x230 [ 2444.836948][T19993] alloc_empty_file+0x90/0x180 [ 2444.841725][T19993] alloc_file+0x5c/0x5f0 [ 2444.845995][T19993] alloc_file_pseudo+0x180/0x200 [ 2444.850955][T19993] ? alloc_empty_file_noaccount+0x80/0x80 [ 2444.856692][T19993] ? __lock_acquire+0x7d10/0x7d10 [ 2444.861738][T19993] ? __local_bh_enable_ip+0x136/0x1c0 [ 2444.867130][T19993] ? _local_bh_enable+0xa0/0xa0 [ 2444.872001][T19993] anon_inode_getfile+0xc1/0x1a0 [ 2444.877047][T19993] bpf_link_prime+0xa2/0x1d0 [ 2444.881655][T19993] bpf_xdp_link_attach+0x1f3/0x490 [ 2444.886803][T19993] ? dev_xdp_prog+0x100/0x100 [ 2444.891525][T19993] link_create+0x648/0xa20 [ 2444.895978][T19993] __sys_bpf+0x6cb/0x780 [ 2444.900248][T19993] ? bpf_link_show_fdinfo+0x380/0x380 [ 2444.905651][T19993] ? lock_chain_count+0x20/0x20 [ 2444.910564][T19993] __x64_sys_bpf+0x78/0x90 [ 2444.915000][T19993] do_syscall_64+0x4c/0xa0 [ 2444.919554][T19993] ? clear_bhb_loop+0x60/0xb0 [ 2444.924261][T19993] ? clear_bhb_loop+0x60/0xb0 [ 2444.928985][T19993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2444.934908][T19993] RIP: 0033:0x7fb3b1d9ce59 [ 2444.939360][T19993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2444.959001][T19993] RSP: 002b:00007fb3b2ce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2444.967436][T19993] RAX: ffffffffffffffda RBX: 00007fb3b2015fa0 RCX: 00007fb3b1d9ce59 [ 2444.975427][T19993] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 2444.983416][T19993] RBP: 00007fb3b2ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 2444.991401][T19993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2444.999388][T19993] R13: 00007fb3b2016038 R14: 00007fb3b2015fa0 R15: 00007fff296ea378 [ 2445.007384][T19993] [ 2445.483338][T19998] netlink: 'syz.0.16045': attribute type 25 has an invalid length. [ 2445.503861][T20000] netlink: 'syz.1.16047': attribute type 10 has an invalid length. [ 2445.826154][T20013] netlink: 'syz.1.16051': attribute type 2 has an invalid length. [ 2445.838585][T20013] netlink: 10 bytes leftover after parsing attributes in process `syz.1.16051'. [ 2446.516828][T20026] netlink: 'syz.0.16055': attribute type 21 has an invalid length. [ 2446.553724][T20026] netlink: 'syz.0.16055': attribute type 11 has an invalid length. [ 2447.378946][T20035] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.16057'. [ 2448.094931][T20048] netlink: 'syz.4.16062': attribute type 25 has an invalid length. [ 2448.150064][T20044] netlink: 'syz.1.16061': attribute type 10 has an invalid length. [ 2448.711848][T20065] FAULT_INJECTION: forcing a failure. [ 2448.711848][T20065] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.733200][T20065] CPU: 0 PID: 20065 Comm: syz.3.16069 Not tainted syzkaller #0 [ 2448.740796][T20065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2448.750880][T20065] Call Trace: [ 2448.754186][T20065] [ 2448.757146][T20065] dump_stack_lvl+0x188/0x24e [ 2448.761870][T20065] ? show_regs_print_info+0x12/0x12 [ 2448.767124][T20065] ? load_image+0x400/0x400 [ 2448.771682][T20065] should_fail_ex+0x399/0x4d0 [ 2448.776398][T20065] should_failslab+0x5/0x20 [ 2448.780934][T20065] slab_pre_alloc_hook+0x59/0x310 [ 2448.786004][T20065] kmem_cache_alloc+0x56/0x2f0 [ 2448.790809][T20065] ? dst_alloc+0x101/0x160 [ 2448.795258][T20065] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 2448.800924][T20065] dst_alloc+0x101/0x160 [ 2448.805208][T20065] ip6_rt_cache_alloc+0x3af/0xa30 [ 2448.810285][T20065] ? rt6_find_cached_rt+0x270/0x270 [ 2448.815526][T20065] ? rt6_find_cached_rt+0x21d/0x270 [ 2448.820770][T20065] ip6_pol_route+0x105f/0x12a0 [ 2448.825574][T20065] ? ip6_pol_route+0x16d/0x12a0 [ 2448.830465][T20065] ? trace_fib6_table_lookup+0x250/0x250 [ 2448.836144][T20065] ? err_ptr+0x1a0/0x1a0 [ 2448.840434][T20065] fib6_rule_lookup+0x208/0x5d0 [ 2448.845392][T20065] ? ip6_route_output_flags_noref+0x390/0x390 [ 2448.851502][T20065] ? fib6_lookup+0x2d0/0x2d0 [ 2448.856164][T20065] ? dev_get_by_index_rcu+0xf0/0x110 [ 2448.861509][T20065] ? __ipv6_addr_type+0xce/0x2f0 [ 2448.866502][T20065] ? ip6_route_output_flags_noref+0x230/0x390 [ 2448.872615][T20065] ip6_route_output_flags+0xe3/0x330 [ 2448.877948][T20065] ? ip6_route_output_flags+0x27/0x330 [ 2448.883475][T20065] ip6_dst_lookup_tail+0x1aa/0x1510 [ 2448.888768][T20065] ? ip6_dst_lookup+0x60/0x60 [ 2448.893515][T20065] ? txopt_get+0x76/0x3f0 [ 2448.897891][T20065] ? txopt_get+0x76/0x3f0 [ 2448.902274][T20065] ? txopt_get+0x340/0x3f0 [ 2448.906761][T20065] ? tomoyo_check_acl+0x378/0x3f0 [ 2448.911848][T20065] ? fl6_sock_lookup+0xc0/0xc0 [ 2448.916688][T20065] ip6_dst_lookup_flow+0x44/0xd0 [ 2448.921732][T20065] rawv6_sendmsg+0xca6/0x1700 [ 2448.926487][T20065] ? compat_rawv6_ioctl+0x60/0x60 [ 2448.931590][T20065] ? aa_sk_perm+0x81f/0x950 [ 2448.936158][T20065] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2448.942645][T20065] ? inet_sendmsg+0x78/0x2f0 [ 2448.947332][T20065] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2448.952667][T20065] ? security_socket_sendmsg+0x7c/0xa0 [ 2448.958190][T20065] ? inet_send_prepare+0x260/0x260 [ 2448.963373][T20065] ____sys_sendmsg+0x5be/0x970 [ 2448.968206][T20065] ? __sys_sendmsg_sock+0x30/0x30 [ 2448.973270][T20065] ? __import_iovec+0x315/0x500 [ 2448.978172][T20065] ? import_iovec+0x6f/0xa0 [ 2448.982735][T20065] ___sys_sendmsg+0x2a2/0x360 [ 2448.987463][T20065] ? __sys_sendmsg+0x290/0x290 [ 2448.992323][T20065] ? trace_call_bpf+0xbf/0x6b0 [ 2448.997172][T20065] __se_sys_sendmsg+0x1bb/0x2a0 [ 2449.002058][T20065] ? ct_nmi_exit+0x145/0x1c0 [ 2449.006681][T20065] ? __x64_sys_sendmsg+0x80/0x80 [ 2449.011684][T20065] ? lockdep_hardirqs_on+0x94/0x140 [ 2449.016920][T20065] do_syscall_64+0x4c/0xa0 [ 2449.021380][T20065] ? clear_bhb_loop+0x60/0xb0 [ 2449.026119][T20065] ? clear_bhb_loop+0x60/0xb0 [ 2449.030830][T20065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2449.036758][T20065] RIP: 0033:0x7f98ee59ce59 [ 2449.041228][T20065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2449.060862][T20065] RSP: 002b:00007f98ef4a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2449.069313][T20065] RAX: ffffffffffffffda RBX: 00007f98ee815fa0 RCX: 00007f98ee59ce59 [ 2449.077318][T20065] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2449.085328][T20065] RBP: 00007f98ef4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2449.093339][T20065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2449.101343][T20065] R13: 00007f98ee816038 R14: 00007f98ee815fa0 R15: 00007ffea6461bb8 [ 2449.109378][T20065] [ 2449.222058][T20057] netlink: 'syz.1.16067': attribute type 10 has an invalid length. [ 2449.232293][T20057] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16067'. [ 2449.361648][T20068] netlink: 'syz.4.16068': attribute type 21 has an invalid length. [ 2449.383431][T20068] netlink: 'syz.4.16068': attribute type 11 has an invalid length. [ 2450.085308][T20081] netlink: 'syz.2.16072': attribute type 2 has an invalid length. [ 2450.113247][T20081] netlink: 10 bytes leftover after parsing attributes in process `syz.2.16072'. [ 2451.446182][T20103] netlink: 'syz.1.16077': attribute type 25 has an invalid length. [ 2451.530002][T20101] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.16076'. [ 2451.639388][T20106] netlink: 'syz.4.16078': attribute type 10 has an invalid length. [ 2452.138631][T20119] FAULT_INJECTION: forcing a failure. [ 2452.138631][T20119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2452.183468][T20119] CPU: 0 PID: 20119 Comm: syz.0.16083 Not tainted syzkaller #0 [ 2452.191072][T20119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2452.201209][T20119] Call Trace: [ 2452.204519][T20119] [ 2452.207470][T20119] dump_stack_lvl+0x188/0x24e [ 2452.212188][T20119] ? show_regs_print_info+0x12/0x12 [ 2452.217431][T20119] ? load_image+0x400/0x400 [ 2452.221979][T20119] ? __lock_acquire+0x7d10/0x7d10 [ 2452.227043][T20119] ? unix_ioctl+0x25d/0x660 [ 2452.231578][T20119] should_fail_ex+0x399/0x4d0 [ 2452.236290][T20119] _copy_from_user+0x2c/0x170 [ 2452.241008][T20119] sock_do_ioctl+0x18c/0x320 [ 2452.245629][T20119] ? preempt_schedule_irq+0xe6/0x160 [ 2452.250958][T20119] ? sock_show_fdinfo+0xb0/0xb0 [ 2452.255847][T20119] ? lock_chain_get_class+0xb0/0xb0 [ 2452.261079][T20119] ? rcu_is_watching+0x11/0xa0 [ 2452.265908][T20119] sock_ioctl+0x4d2/0x710 [ 2452.270285][T20119] ? sock_poll+0x410/0x410 [ 2452.274786][T20119] ? security_file_ioctl+0x41/0xa0 [ 2452.279935][T20119] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2452.284910][T20119] ? security_file_ioctl+0x7c/0xa0 [ 2452.290065][T20119] ? sock_poll+0x410/0x410 [ 2452.294559][T20119] __se_sys_ioctl+0xfa/0x170 [ 2452.299196][T20119] do_syscall_64+0x4c/0xa0 [ 2452.303660][T20119] ? clear_bhb_loop+0x60/0xb0 [ 2452.308397][T20119] ? clear_bhb_loop+0x60/0xb0 [ 2452.313115][T20119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2452.319046][T20119] RIP: 0033:0x7f606f19ce59 [ 2452.323496][T20119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2452.343132][T20119] RSP: 002b:00007f6070112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2452.351581][T20119] RAX: ffffffffffffffda RBX: 00007f606f416090 RCX: 00007f606f19ce59 [ 2452.359577][T20119] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000006 [ 2452.367591][T20119] RBP: 00007f6070112090 R08: 0000000000000000 R09: 0000000000000000 [ 2452.375598][T20119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2452.383594][T20119] R13: 00007f606f416128 R14: 00007f606f416090 R15: 00007ffd98ee6e48 [ 2452.391611][T20119] [ 2453.039130][T20115] netlink: 'syz.2.16081': attribute type 10 has an invalid length. [ 2453.054679][T20115] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16081'. [ 2453.078154][T20118] device wg2 entered promiscuous mode [ 2453.394428][T20143] netlink: 'syz.3.16090': attribute type 25 has an invalid length. [ 2453.920124][T20154] netlink: 'syz.4.16092': attribute type 2 has an invalid length. [ 2453.939089][T20154] netlink: 10 bytes leftover after parsing attributes in process `syz.4.16092'. [ 2453.944017][T21573] Bluetooth: hci0: command 0x0406 tx timeout [ 2455.042081][T20160] netlink: 'syz.2.16093': attribute type 10 has an invalid length. [ 2458.494646][ T5921] device wlan1 left promiscuous mode [ 2458.505612][ T5921] team0: Port device wlan1 removed [ 2458.525155][T20187] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.16110'. [ 2458.535175][T20186] netlink: 'syz.3.16100': attribute type 10 has an invalid length. [ 2458.554998][T20186] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16100'. [ 2458.570498][T20200] netlink: 'syz.2.16103': attribute type 21 has an invalid length. [ 2458.584603][T20200] netlink: 'syz.2.16103': attribute type 11 has an invalid length. [ 2458.621288][T20205] netlink: 'syz.0.16104': attribute type 25 has an invalid length. [ 2458.828664][T20207] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.16105'. [ 2458.901248][ T5921] device hsr_slave_0 left promiscuous mode [ 2458.913031][ T5921] device hsr_slave_1 left promiscuous mode [ 2458.925758][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2458.941038][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2458.958944][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2458.966746][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2458.974894][ T5921] bridge0: port 4(team0) entered disabled state [ 2458.982893][ T5921] bridge0: port 3(hsr0) entered disabled state [ 2458.991112][ T5921] device bridge_slave_0 left promiscuous mode [ 2458.997509][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 2459.026132][ T5921] device veth1_vlan left promiscuous mode [ 2459.032089][ T5921] device veth0_vlan left promiscuous mode [ 2459.317389][ T5921] device macvlan1 left promiscuous mode [ 2459.328062][ T5921] team0 (unregistering): Port device macvlan1 removed [ 2459.617838][ T5921] device team_slave_1 left promiscuous mode [ 2459.627772][ T5921] team0 (unregistering): Port device team_slave_1 removed [ 2459.710969][ T5921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2459.752909][ T5921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2459.792263][ T5921] device bridge_slave_1 left promiscuous mode [ 2459.800023][ T5921] team0 (unregistering): Port device bridge_slave_1 removed [ 2459.959780][ T5921] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2460.027612][ T5921] bond0 (unregistering): Released all slaves [ 2460.114768][T20210] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2460.124253][T20217] netlink: 'syz.0.16109': attribute type 10 has an invalid length. [ 2460.997781][T20247] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.16119'. [ 2462.449572][T20256] netlink: 'syz.0.16121': attribute type 25 has an invalid length. [ 2462.583689][T16912] wlan1: Trigger new scan to find an IBSS to join [ 2462.843962][T20269] netlink: 'syz.0.16127': attribute type 10 has an invalid length. [ 2462.944881][T20271] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2463.452532][T20281] netlink: 'syz.0.16132': attribute type 10 has an invalid length. [ 2463.520908][T20281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2463.548309][T20281] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2463.550690][T20285] netlink: 'syz.1.16133': attribute type 11 has an invalid length. [ 2463.600375][T20285] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16133'. [ 2463.632530][ T5921] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2463.906478][T20295] netlink: 12798 bytes leftover after parsing attributes in process `syz.4.16135'. [ 2463.935856][T20284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2464.074925][T20301] netlink: 'syz.2.16139': attribute type 25 has an invalid length. [ 2464.183363][T16788] Bluetooth: hci1: command 0x0406 tx timeout [ 2464.845451][T20315] netlink: 'syz.0.16142': attribute type 10 has an invalid length. [ 2466.080206][T20321] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2466.248177][T20333] netlink: 'syz.3.16149': attribute type 10 has an invalid length. [ 2466.322582][T20333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2466.349333][T20333] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2466.362538][T20335] netlink: 'syz.4.16150': attribute type 25 has an invalid length. [ 2466.792391][T20354] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.16155'. [ 2467.235015][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.241449][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.507503][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2468.932023][T20353] device wg2 entered promiscuous mode [ 2468.939411][T20354] netlink: 'syz.4.16155': attribute type 10 has an invalid length. [ 2468.959634][T20354] device geneve0 entered promiscuous mode [ 2468.999255][T20354] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2469.019850][T20350] netlink: 12798 bytes leftover after parsing attributes in process `syz.3.16154'. [ 2469.287794][T20362] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2470.278149][T20380] FAULT_INJECTION: forcing a failure. [ 2470.278149][T20380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2470.340491][T20380] CPU: 1 PID: 20380 Comm: syz.2.16163 Not tainted syzkaller #0 [ 2470.348088][T20380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2470.358169][T20380] Call Trace: [ 2470.361467][T20380] [ 2470.364421][T20380] dump_stack_lvl+0x188/0x24e [ 2470.369155][T20380] ? show_regs_print_info+0x12/0x12 [ 2470.374394][T20380] ? load_image+0x400/0x400 [ 2470.378931][T20380] ? __lock_acquire+0x7d10/0x7d10 [ 2470.383994][T20380] should_fail_ex+0x399/0x4d0 [ 2470.388702][T20380] _copy_from_user+0x2c/0x170 [ 2470.393413][T20380] __sys_bpf+0x2ea/0x780 [ 2470.397696][T20380] ? bpf_link_show_fdinfo+0x380/0x380 [ 2470.403117][T20380] ? lock_chain_count+0x20/0x20 [ 2470.408010][T20380] __x64_sys_bpf+0x78/0x90 [ 2470.412460][T20380] do_syscall_64+0x4c/0xa0 [ 2470.416909][T20380] ? clear_bhb_loop+0x60/0xb0 [ 2470.421619][T20380] ? clear_bhb_loop+0x60/0xb0 [ 2470.426343][T20380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2470.432283][T20380] RIP: 0033:0x7fb3b1d9ce59 [ 2470.436724][T20380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2470.456374][T20380] RSP: 002b:00007fb3b2ce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2470.464847][T20380] RAX: ffffffffffffffda RBX: 00007fb3b2015fa0 RCX: 00007fb3b1d9ce59 [ 2470.472844][T20380] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2470.480856][T20380] RBP: 00007fb3b2ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 2470.488852][T20380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.496861][T20380] R13: 00007fb3b2016038 R14: 00007fb3b2015fa0 R15: 00007fff296ea378 [ 2470.504895][T20380] [ 2470.955091][T20386] netlink: 'syz.1.16166': attribute type 10 has an invalid length. [ 2471.553480][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2472.164613][T20386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2472.177847][T20386] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2472.191552][T20388] netlink: 'syz.3.16165': attribute type 25 has an invalid length. [ 2472.594892][T20406] device wg2 left promiscuous mode [ 2472.700170][T20406] device wg2 entered promiscuous mode [ 2472.716516][T20405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2472.750867][T20405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2472.825752][T20405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2472.849442][T20405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2473.363340][T20405] bond0: (slave batadv0): Releasing backup interface [ 2473.385500][T20411] netlink: 12798 bytes leftover after parsing attributes in process `syz.1.16171'. [ 2473.400985][T20415] netlink: 'syz.2.16174': attribute type 10 has an invalid length. [ 2473.411401][T20415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16174'. [ 2473.695070][T20430] netlink: 'syz.1.16179': attribute type 25 has an invalid length. [ 2474.132622][T20447] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.16183'. [ 2474.423708][T21573] Bluetooth: hci3: command 0x0406 tx timeout [ 2474.585328][T16912] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2475.702527][T20461] netlink: 'syz.1.16189': attribute type 2 has an invalid length. [ 2475.713302][T20461] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16189'. [ 2475.971807][T20464] netlink: 'syz.1.16189': attribute type 13 has an invalid length. [ 2475.988245][T20464] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16189'. [ 2476.054350][T20464] erspan0: refused to change device tx_queue_len [ 2476.220644][T20471] FAULT_INJECTION: forcing a failure. [ 2476.220644][T20471] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.278875][T20468] netlink: 'syz.4.16191': attribute type 21 has an invalid length. [ 2476.283616][T20471] CPU: 0 PID: 20471 Comm: syz.0.16192 Not tainted syzkaller #0 [ 2476.294512][T20471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2476.304603][T20471] Call Trace: [ 2476.307917][T20471] [ 2476.310887][T20471] dump_stack_lvl+0x188/0x24e [ 2476.315614][T20471] ? show_regs_print_info+0x12/0x12 [ 2476.320859][T20471] ? load_image+0x400/0x400 [ 2476.325394][T20471] ? __might_sleep+0xd0/0xd0 [ 2476.330038][T20471] ? __lock_acquire+0x7d10/0x7d10 [ 2476.335128][T20471] should_fail_ex+0x399/0x4d0 [ 2476.339841][T20471] should_failslab+0x5/0x20 [ 2476.344369][T20471] slab_pre_alloc_hook+0x59/0x310 [ 2476.349435][T20471] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 2476.354851][T20471] __kmem_cache_alloc_node+0x4f/0x260 [ 2476.360256][T20471] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 2476.365661][T20471] kmalloc_trace+0x26/0xe0 [ 2476.370116][T20471] tcp_sendmsg_fastopen+0x1d5/0x600 [ 2476.375366][T20471] tcp_sendmsg_locked+0x3616/0x3a90 [ 2476.380601][T20471] ? verify_lock_unused+0x140/0x140 [ 2476.385884][T20471] ? __might_sleep+0xd0/0xd0 [ 2476.390490][T20471] ? mark_lock+0x94/0x320 [ 2476.394840][T20471] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2476.400886][T20471] ? lock_chain_count+0x20/0x20 [ 2476.405757][T20471] ? tcp_sendmsg+0x1d/0x40 [ 2476.410189][T20471] ? tcp_set_state+0x520/0x520 [ 2476.414977][T20471] tcp_sendmsg+0x2b/0x40 [ 2476.419230][T20471] ? inet_send_prepare+0x260/0x260 [ 2476.424361][T20471] ____sys_sendmsg+0x5be/0x970 [ 2476.429186][T20471] ? __sys_sendmsg_sock+0x30/0x30 [ 2476.434275][T20471] ? __import_iovec+0x315/0x500 [ 2476.439165][T20471] ? import_iovec+0x6f/0xa0 [ 2476.443705][T20471] ___sys_sendmsg+0x2a2/0x360 [ 2476.448404][T20471] ? __sys_sendmsg+0x290/0x290 [ 2476.453195][T20471] ? __lock_acquire+0x7d10/0x7d10 [ 2476.458254][T20471] __se_sys_sendmsg+0x1bb/0x2a0 [ 2476.463127][T20471] ? __x64_sys_sendmsg+0x80/0x80 [ 2476.468095][T20471] ? lockdep_hardirqs_on+0x94/0x140 [ 2476.473336][T20471] do_syscall_64+0x4c/0xa0 [ 2476.477772][T20471] ? clear_bhb_loop+0x60/0xb0 [ 2476.482471][T20471] ? clear_bhb_loop+0x60/0xb0 [ 2476.487175][T20471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2476.493096][T20471] RIP: 0033:0x7f606f19ce59 [ 2476.497523][T20471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2476.517141][T20471] RSP: 002b:00007f6070133028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2476.525593][T20471] RAX: ffffffffffffffda RBX: 00007f606f415fa0 RCX: 00007f606f19ce59 [ 2476.533580][T20471] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 0000000000000003 [ 2476.541570][T20471] RBP: 00007f6070133090 R08: 0000000000000000 R09: 0000000000000000 [ 2476.549547][T20471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2476.557531][T20471] R13: 00007f606f416038 R14: 00007f606f415fa0 R15: 00007ffd98ee6e48 [ 2476.565524][T20471] [ 2476.714307][T20478] netlink: 'syz.1.16194': attribute type 25 has an invalid length. [ 2477.442332][T20493] netlink: 'syz.1.16198': attribute type 21 has an invalid length. [ 2477.479486][T20493] netlink: 'syz.1.16198': attribute type 11 has an invalid length. [ 2478.196816][T20495] netlink: 'syz.4.16199': attribute type 10 has an invalid length. [ 2479.373206][T20504] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2479.860231][T20520] netlink: 'syz.4.16207': attribute type 11 has an invalid length. [ 2479.879793][T20520] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16207'. [ 2480.492740][T20515] device wg2 entered promiscuous mode [ 2480.566479][T20518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2480.703850][T20527] netlink: 'syz.3.16210': attribute type 25 has an invalid length. [ 2481.194264][T20543] netlink: 'syz.2.16215': attribute type 21 has an invalid length. [ 2481.242680][T20543] netlink: 'syz.2.16215': attribute type 11 has an invalid length. [ 2481.544243][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 2484.088287][T20548] netlink: 'syz.2.16216': attribute type 10 has an invalid length. [ 2484.260304][T20558] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2484.481504][T20561] netlink: 'syz.2.16223': attribute type 25 has an invalid length. [ 2484.519561][T20552] netlink: 'syz.4.16218': attribute type 10 has an invalid length. [ 2484.545428][T20552] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16218'. [ 2484.564948][T20552] device hsr0 entered promiscuous mode [ 2484.587415][T20552] bridge0: port 3(hsr0) entered blocking state [ 2484.644781][T20552] bridge0: port 3(hsr0) entered disabled state [ 2484.807584][T20552] bridge0: port 3(hsr0) entered blocking state [ 2484.817226][T20552] bridge0: port 3(hsr0) entered forwarding state [ 2484.886291][T20571] netlink: 'syz.1.16226': attribute type 21 has an invalid length. [ 2484.922245][T20571] netlink: 'syz.1.16226': attribute type 11 has an invalid length. [ 2485.963373][T20591] netlink: 'syz.0.16233': attribute type 10 has an invalid length. [ 2486.584697][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2486.591360][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2487.870488][ T4224] wlan1: Creating new IBSS network, BSSID 06:67:c3:2d:0c:02 [ 2488.132187][T20600] netlink: 'syz.2.16237': attribute type 25 has an invalid length. [ 2488.368388][T20608] netlink: 'syz.4.16240': attribute type 21 has an invalid length. [ 2488.402331][T20608] netlink: 'syz.4.16240': attribute type 11 has an invalid length. [ 2489.324836][T20606] netlink: 'syz.3.16239': attribute type 10 has an invalid length. [ 2489.354455][T20606] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16239'. [ 2490.052892][T20629] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2490.172675][T20633] netlink: 'syz.4.16247': attribute type 10 has an invalid length. [ 2490.325584][T20643] netlink: 'syz.4.16252': attribute type 25 has an invalid length. [ 2490.500361][T20646] netlink: 'syz.2.16253': attribute type 21 has an invalid length. [ 2490.525899][T20646] netlink: 'syz.2.16253': attribute type 11 has an invalid length. [ 2491.204428][T20652] netlink: 'syz.1.16255': attribute type 10 has an invalid length. [ 2491.220754][T20652] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16255'. [ 2492.583893][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2493.119889][T20675] netlink: 'syz.2.16263': attribute type 10 has an invalid length. [ 2493.145166][T20677] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2493.240589][T20683] netlink: 'syz.0.16266': attribute type 25 has an invalid length. [ 2493.408302][T20687] netlink: 'syz.3.16267': attribute type 21 has an invalid length. [ 2493.421606][T20687] netlink: 'syz.3.16267': attribute type 11 has an invalid length. [ 2493.978430][T20702] netlink: 'syz.0.16274': attribute type 10 has an invalid length. [ 2493.989745][T20702] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16274'. [ 2494.022229][T20702] device hsr0 entered promiscuous mode [ 2494.058961][T20702] bridge0: port 3(hsr0) entered blocking state [ 2494.072223][T20702] bridge0: port 3(hsr0) entered disabled state [ 2494.225731][T20702] bridge0: port 3(hsr0) entered blocking state [ 2494.233501][T20702] bridge0: port 3(hsr0) entered forwarding state [ 2494.659636][ T4224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2496.282596][T20718] netlink: 'syz.3.16278': attribute type 10 has an invalid length. [ 2496.380714][T20726] netlink: 'syz.2.16281': attribute type 25 has an invalid length. [ 2496.445620][T20728] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2496.680987][T20737] netlink: 'syz.1.16283': attribute type 21 has an invalid length. [ 2496.692209][T20737] netlink: 'syz.1.16283': attribute type 11 has an invalid length. [ 2497.553780][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2498.458691][T20765] netlink: 'syz.0.16294': attribute type 10 has an invalid length. [ 2498.488617][T20769] netlink: 'syz.3.16295': attribute type 25 has an invalid length. [ 2498.513474][ T4224] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2498.649712][T20774] netlink: 'syz.1.16298': attribute type 21 has an invalid length. [ 2498.697415][T20774] netlink: 'syz.1.16298': attribute type 11 has an invalid length. [ 2498.906969][T20772] netlink: 'syz.4.16297': attribute type 10 has an invalid length. [ 2498.927769][T20772] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16297'. [ 2500.356953][T20815] netlink: 'syz.0.16310': attribute type 10 has an invalid length. [ 2500.380490][T20817] netlink: 'syz.4.16311': attribute type 25 has an invalid length. [ 2500.550640][T20811] device wg2 entered promiscuous mode [ 2500.694672][T20823] netlink: 'syz.1.16313': attribute type 21 has an invalid length. [ 2500.712331][T20823] netlink: 'syz.1.16313': attribute type 11 has an invalid length. [ 2501.017372][T20825] netlink: 'syz.0.16314': attribute type 10 has an invalid length. [ 2501.047236][T20825] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16314'. [ 2504.329780][T20858] netlink: 'syz.3.16326': attribute type 25 has an invalid length. [ 2504.459321][T20857] netlink: 'syz.2.16325': attribute type 10 has an invalid length. [ 2505.395692][T20874] netlink: 'syz.3.16330': attribute type 21 has an invalid length. [ 2505.410371][T20874] netlink: 'syz.3.16330': attribute type 11 has an invalid length. [ 2505.606994][T20884] netlink: 'syz.1.16336': attribute type 10 has an invalid length. [ 2505.632156][T20884] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16336'. [ 2506.297534][T20893] netlink: 'syz.1.16340': attribute type 25 has an invalid length. [ 2506.414673][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16341'. [ 2506.488842][T20898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16341'. [ 2506.551743][T20898] netlink: 33 bytes leftover after parsing attributes in process `syz.2.16341'. [ 2506.623315][T20898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16341'. [ 2506.643075][T20898] netlink: 33 bytes leftover after parsing attributes in process `syz.2.16341'. [ 2506.686545][T20898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16341'. [ 2506.716883][T20898] netlink: 33 bytes leftover after parsing attributes in process `syz.2.16341'. [ 2506.750760][T20897] netlink: 'syz.2.16341': attribute type 10 has an invalid length. [ 2508.011328][T20920] netlink: 'syz.0.16347': attribute type 21 has an invalid length. [ 2508.019994][T20920] netlink: 'syz.0.16347': attribute type 11 has an invalid length. [ 2508.047612][T20924] netlink: 'syz.3.16349': attribute type 10 has an invalid length. [ 2508.056231][T20924] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16349'. [ 2509.371595][T20963] validate_nla: 2 callbacks suppressed [ 2509.371653][T20963] netlink: 'syz.4.16362': attribute type 21 has an invalid length. [ 2509.396830][T20963] netlink: 'syz.4.16362': attribute type 11 has an invalid length. [ 2510.208505][T20968] netlink: 'syz.3.16363': attribute type 10 has an invalid length. [ 2510.221280][T20968] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16363'. [ 2510.612536][T20982] netlink: 'syz.0.16369': attribute type 25 has an invalid length. [ 2511.304070][T20993] netlink: 'syz.3.16373': attribute type 10 has an invalid length. [ 2511.509627][T21001] netlink: 'syz.2.16376': attribute type 2 has an invalid length. [ 2511.523976][T21001] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16376'. [ 2511.809519][T21002] netlink: 'syz.2.16376': attribute type 13 has an invalid length. [ 2511.821477][T21002] netlink: 172 bytes leftover after parsing attributes in process `syz.2.16376'. [ 2512.047606][T21002] erspan0: refused to change device tx_queue_len [ 2512.154351][T21008] netlink: 'syz.3.16377': attribute type 21 has an invalid length. [ 2512.162650][T21008] netlink: 'syz.3.16377': attribute type 11 has an invalid length. [ 2512.423587][T21015] netlink: 'syz.1.16379': attribute type 10 has an invalid length. [ 2512.462116][T21015] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16379'. [ 2513.794008][T21048] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16392'. [ 2513.896158][T21051] netlink: 172 bytes leftover after parsing attributes in process `syz.3.16392'. [ 2514.019246][T21051] erspan0: refused to change device tx_queue_len [ 2514.443571][T21056] validate_nla: 7 callbacks suppressed [ 2514.443611][T21056] netlink: 'syz.4.16395': attribute type 10 has an invalid length. [ 2514.501547][T21056] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16395'. [ 2514.757901][T21068] netlink: 'syz.2.16400': attribute type 10 has an invalid length. [ 2515.519727][T21084] netlink: 'syz.1.16406': attribute type 25 has an invalid length. [ 2516.648754][T21090] netlink: 'syz.3.16408': attribute type 21 has an invalid length. [ 2516.712980][T21090] netlink: 'syz.3.16408': attribute type 11 has an invalid length. [ 2517.905836][T16912] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2517.986148][T21105] netlink: 'syz.2.16414': attribute type 10 has an invalid length. [ 2518.012918][T21105] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16414'. [ 2518.305239][T21110] netlink: 'syz.3.16415': attribute type 10 has an invalid length. [ 2519.825332][T21119] netlink: 'syz.4.16419': attribute type 25 has an invalid length. [ 2522.584429][T21140] netlink: 'syz.4.16426': attribute type 2 has an invalid length. [ 2522.602970][T21139] netlink: 'syz.0.16425': attribute type 21 has an invalid length. [ 2522.623296][T21140] netlink: 164 bytes leftover after parsing attributes in process `syz.4.16426'. [ 2522.683899][T21139] netlink: 'syz.0.16425': attribute type 11 has an invalid length. [ 2522.797259][T21144] netlink: 'syz.4.16426': attribute type 13 has an invalid length. [ 2522.896498][T21144] netlink: 172 bytes leftover after parsing attributes in process `syz.4.16426'. [ 2523.027185][T21144] erspan0: refused to change device tx_queue_len [ 2523.115921][T21145] netlink: 'syz.1.16428': attribute type 10 has an invalid length. [ 2523.144280][T21142] netlink: 'syz.3.16427': attribute type 10 has an invalid length. [ 2523.182610][T21142] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16427'. [ 2523.578528][T21157] netlink: 'syz.1.16431': attribute type 25 has an invalid length. [ 2524.725097][T21185] netlink: 'syz.4.16440': attribute type 21 has an invalid length. [ 2524.735434][T21185] netlink: 'syz.4.16440': attribute type 11 has an invalid length. [ 2524.942507][T21189] netlink: 'syz.4.16442': attribute type 10 has an invalid length. [ 2525.972877][T21195] netlink: 'syz.4.16444': attribute type 25 has an invalid length. [ 2525.999148][T21197] netlink: 'syz.2.16445': attribute type 10 has an invalid length. [ 2526.033418][T21197] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16445'. [ 2526.095714][T13016] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2526.180222][T21204] netlink: 'syz.1.16447': attribute type 2 has an invalid length. [ 2526.214894][T21204] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16447'. [ 2527.502227][T21218] netlink: 'syz.1.16454': attribute type 10 has an invalid length. [ 2527.735162][T21228] netlink: 'syz.0.16456': attribute type 25 has an invalid length. [ 2527.816241][T21230] netlink: 'syz.1.16457': attribute type 21 has an invalid length. [ 2527.836817][T21230] netlink: 'syz.1.16457': attribute type 11 has an invalid length. [ 2528.553776][ T4224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2528.672797][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.679881][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.248432][T21237] netlink: 'syz.1.16460': attribute type 10 has an invalid length. [ 2529.268075][T21237] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16460'. [ 2529.459379][T21251] netlink: 'syz.1.16465': attribute type 2 has an invalid length. [ 2529.495551][T21251] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16465'. [ 2530.406425][T21255] netlink: 'syz.4.16467': attribute type 10 has an invalid length. [ 2530.507813][T21263] netlink: 'syz.3.16469': attribute type 25 has an invalid length. [ 2531.610833][T21275] netlink: 'syz.3.16474': attribute type 21 has an invalid length. [ 2531.622873][T21275] netlink: 'syz.3.16474': attribute type 11 has an invalid length. [ 2533.172994][T21282] netlink: 'syz.0.16476': attribute type 10 has an invalid length. [ 2533.202724][T21282] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16476'. [ 2534.374323][T21299] netlink: 'syz.0.16482': attribute type 10 has an invalid length. [ 2535.660851][T21303] netlink: 'syz.4.16483': attribute type 25 has an invalid length. [ 2535.768744][T21310] netlink: 'syz.1.16486': attribute type 2 has an invalid length. [ 2535.808145][T21310] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16486'. [ 2535.950748][T21316] netlink: 'syz.4.16488': attribute type 21 has an invalid length. [ 2535.997441][T21316] netlink: 'syz.4.16488': attribute type 11 has an invalid length. [ 2537.307495][T21337] netlink: 'syz.3.16495': attribute type 10 has an invalid length. [ 2538.203172][T21331] netlink: 'syz.1.16493': attribute type 10 has an invalid length. [ 2538.211365][T21331] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16493'. [ 2538.449276][T21347] netlink: 'syz.3.16498': attribute type 25 has an invalid length. [ 2540.722841][T21368] netlink: 'syz.1.16504': attribute type 21 has an invalid length. [ 2540.741347][T21368] netlink: 'syz.1.16504': attribute type 11 has an invalid length. [ 2541.115591][T21377] netlink: 'syz.1.16508': attribute type 10 has an invalid length. [ 2541.888250][T21384] netlink: 'syz.3.16511': attribute type 2 has an invalid length. [ 2541.928358][T21384] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16511'. [ 2541.967454][T21386] netlink: 'syz.2.16512': attribute type 25 has an invalid length. [ 2542.152098][T21380] netlink: 'syz.1.16509': attribute type 10 has an invalid length. [ 2542.163756][T21380] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16509'. [ 2543.214463][T21407] netlink: 'syz.2.16519': attribute type 10 has an invalid length. [ 2543.228458][T21403] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2543.595477][T21416] netlink: 'syz.2.16522': attribute type 21 has an invalid length. [ 2543.611891][T21416] netlink: 'syz.2.16522': attribute type 11 has an invalid length. [ 2544.893243][T21429] netlink: 'syz.2.16526': attribute type 25 has an invalid length. [ 2545.254921][T21436] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16530'. [ 2545.324094][T21443] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2548.364862][T21454] validate_nla: 2 callbacks suppressed [ 2548.364878][T21454] netlink: 'syz.3.16536': attribute type 21 has an invalid length. [ 2548.380656][T21454] netlink: 'syz.3.16536': attribute type 11 has an invalid length. [ 2549.650474][ T4224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2549.671786][T21487] netlink: 'syz.2.16544': attribute type 25 has an invalid length. [ 2549.808293][T21485] netlink: 'syz.0.16546': attribute type 10 has an invalid length. [ 2550.054816][T21493] FAULT_INJECTION: forcing a failure. [ 2550.054816][T21493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2550.193520][T21493] CPU: 0 PID: 21493 Comm: syz.4.16549 Not tainted syzkaller #0 [ 2550.201207][T21493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2550.211288][T21493] Call Trace: [ 2550.214601][T21493] [ 2550.217555][T21493] dump_stack_lvl+0x188/0x24e [ 2550.222281][T21493] ? show_regs_print_info+0x12/0x12 [ 2550.227514][T21493] ? load_image+0x400/0x400 [ 2550.232053][T21493] ? __lock_acquire+0x7d10/0x7d10 [ 2550.237112][T21493] ? __lock_acquire+0x7d10/0x7d10 [ 2550.242181][T21493] should_fail_ex+0x399/0x4d0 [ 2550.246896][T21493] _copy_from_user+0x2c/0x170 [ 2550.251606][T21493] ___sys_sendmsg+0x1c3/0x360 [ 2550.256324][T21493] ? __sys_sendmsg+0x290/0x290 [ 2550.261147][T21493] ? trace_call_bpf+0xbf/0x6b0 [ 2550.265977][T21493] __se_sys_sendmsg+0x1bb/0x2a0 [ 2550.270875][T21493] ? ct_nmi_exit+0x145/0x1c0 [ 2550.275502][T21493] ? __x64_sys_sendmsg+0x80/0x80 [ 2550.280490][T21493] ? lockdep_hardirqs_on+0x94/0x140 [ 2550.285735][T21493] do_syscall_64+0x4c/0xa0 [ 2550.290193][T21493] ? clear_bhb_loop+0x60/0xb0 [ 2550.294909][T21493] ? clear_bhb_loop+0x60/0xb0 [ 2550.299627][T21493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2550.305563][T21493] RIP: 0033:0x7f532d99ce59 [ 2550.310006][T21493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2550.329638][T21493] RSP: 002b:00007f532e93c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2550.338081][T21493] RAX: ffffffffffffffda RBX: 00007f532dc15fa0 RCX: 00007f532d99ce59 [ 2550.346079][T21493] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 2550.354072][T21493] RBP: 00007f532e93c090 R08: 0000000000000000 R09: 0000000000000000 [ 2550.362063][T21493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2550.370061][T21493] R13: 00007f532dc16038 R14: 00007f532dc15fa0 R15: 00007ffd933b9518 [ 2550.378073][T21493] [ 2550.401338][T21498] netlink: 'syz.3.16551': attribute type 21 has an invalid length. [ 2550.461868][T21498] netlink: 'syz.3.16551': attribute type 11 has an invalid length. [ 2552.381678][T21503] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2552.406679][T21489] netlink: 'syz.1.16547': attribute type 10 has an invalid length. [ 2552.423049][T21489] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16547'. [ 2552.760389][T21524] netlink: 'syz.3.16558': attribute type 25 has an invalid length. [ 2553.197298][T21532] netlink: 'syz.3.16561': attribute type 10 has an invalid length. [ 2554.596857][ T4224] wlan1: Trigger new scan to find an IBSS to join [ 2554.612463][T21537] netlink: 'syz.0.16563': attribute type 21 has an invalid length. [ 2554.667414][T21537] netlink: 'syz.0.16563': attribute type 11 has an invalid length. [ 2555.599033][T21546] netlink: 'syz.2.16566': attribute type 10 has an invalid length. [ 2555.653278][T21546] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16566'. [ 2555.853071][T21565] netlink: 'syz.2.16571': attribute type 25 has an invalid length. [ 2556.109912][T21567] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2556.282572][T21576] netlink: 'syz.4.16574': attribute type 10 has an invalid length. [ 2556.396929][T21579] netlink: 'syz.2.16575': attribute type 2 has an invalid length. [ 2556.423367][T21579] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16575'. [ 2557.422824][T21589] netlink: 'syz.2.16579': attribute type 21 has an invalid length. [ 2557.439077][T21589] netlink: 'syz.2.16579': attribute type 11 has an invalid length. [ 2557.557555][T21596] netlink: 'syz.3.16581': attribute type 3 has an invalid length. [ 2557.615069][T21596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16581'. [ 2557.660394][T21598] netlink: 'syz.4.16582': attribute type 25 has an invalid length. [ 2558.513453][ T47] wlan1: Trigger new scan to find an IBSS to join [ 2558.605641][T21600] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16583'. [ 2560.192223][T21620] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2560.208183][T13016] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2560.538334][T21629] validate_nla: 2 callbacks suppressed [ 2560.538350][T21629] netlink: 'syz.3.16592': attribute type 2 has an invalid length. [ 2560.573169][T21629] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16592'. [ 2560.694383][T21631] netlink: 'syz.4.16593': attribute type 21 has an invalid length. [ 2560.753035][T21631] netlink: 'syz.4.16593': attribute type 11 has an invalid length. [ 2560.811224][T21638] netlink: 'syz.3.16596': attribute type 25 has an invalid length. [ 2561.417630][T21653] netlink: 'syz.1.16601': attribute type 10 has an invalid length. [ 2562.329613][T21665] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2562.456426][T21658] netlink: 'syz.2.16599': attribute type 10 has an invalid length. [ 2562.484737][T21658] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16599'. [ 2562.507213][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2562.513846][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2563.003515][T21676] netlink: 'syz.0.16608': attribute type 2 has an invalid length. [ 2563.011484][T21676] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16608'. [ 2563.217943][T21682] netlink: 'syz.3.16610': attribute type 25 has an invalid length. [ 2563.295509][T21683] netlink: 'syz.2.16609': attribute type 21 has an invalid length. [ 2563.324546][T21683] netlink: 'syz.2.16609': attribute type 11 has an invalid length. [ 2563.427990][ T5866] wlan1: Creating new IBSS network, BSSID 86:1d:64:8e:66:4e [ 2564.583844][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2565.687818][T21705] delete_channel: no stack [ 2565.830747][T21709] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2565.997978][T21711] validate_nla: 1 callbacks suppressed [ 2565.998018][T21711] netlink: 'syz.1.16620': attribute type 10 has an invalid length. [ 2566.029185][T21711] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16620'. [ 2566.102119][T21719] netlink: 'syz.3.16623': attribute type 2 has an invalid length. [ 2566.129165][T21719] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16623'. [ 2566.190965][T21722] netlink: 'syz.2.16624': attribute type 25 has an invalid length. [ 2566.423059][T21728] netlink: 'syz.3.16628': attribute type 10 has an invalid length. [ 2566.503207][T21736] netlink: 'syz.4.16627': attribute type 21 has an invalid length. [ 2566.532822][T21736] netlink: 'syz.4.16627': attribute type 11 has an invalid length. [ 2567.544934][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2567.677404][T21753] FAULT_INJECTION: forcing a failure. [ 2567.677404][T21753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2567.783090][T21753] CPU: 1 PID: 21753 Comm: syz.2.16635 Not tainted syzkaller #0 [ 2567.790704][T21753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2567.800798][T21753] Call Trace: [ 2567.804117][T21753] [ 2567.807081][T21753] dump_stack_lvl+0x188/0x24e [ 2567.811813][T21753] ? show_regs_print_info+0x12/0x12 [ 2567.817185][T21753] ? load_image+0x400/0x400 [ 2567.821738][T21753] ? __lock_acquire+0x7d10/0x7d10 [ 2567.826830][T21753] should_fail_ex+0x399/0x4d0 [ 2567.831561][T21753] _copy_from_user+0x2c/0x170 [ 2567.836313][T21753] ___sys_sendmsg+0x1c3/0x360 [ 2567.841076][T21753] ? __sys_sendmsg+0x290/0x290 [ 2567.845943][T21753] ? trace_call_bpf+0xbf/0x6b0 [ 2567.850813][T21753] __se_sys_sendmsg+0x1bb/0x2a0 [ 2567.855715][T21753] ? ct_nmi_exit+0x145/0x1c0 [ 2567.860351][T21753] ? __x64_sys_sendmsg+0x80/0x80 [ 2567.865420][T21753] ? lockdep_hardirqs_on+0x94/0x140 [ 2567.870681][T21753] do_syscall_64+0x4c/0xa0 [ 2567.875157][T21753] ? clear_bhb_loop+0x60/0xb0 [ 2567.879874][T21753] ? clear_bhb_loop+0x60/0xb0 [ 2567.884612][T21753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2567.890583][T21753] RIP: 0033:0x7fb3b1d9ce59 [ 2567.895040][T21753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2567.914712][T21753] RSP: 002b:00007fb3b2ce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2567.923180][T21753] RAX: ffffffffffffffda RBX: 00007fb3b2015fa0 RCX: 00007fb3b1d9ce59 [ 2567.931187][T21753] RDX: 0000000020044818 RSI: 00002000000009c0 RDI: 0000000000000004 [ 2567.939201][T21753] RBP: 00007fb3b2ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 2567.947180][T21753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2567.955166][T21753] R13: 00007fb3b2016038 R14: 00007fb3b2015fa0 R15: 00007fff296ea378 [ 2567.963190][T21753] [ 2569.553224][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2569.571304][ T5867] wlan1: Creating new IBSS network, BSSID de:15:9c:38:0f:d4 [ 2569.844150][T21755] netlink: 'syz.0.16636': attribute type 10 has an invalid length. [ 2569.877959][T21755] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16636'. [ 2569.911200][T21763] netlink: 'syz.4.16639': attribute type 25 has an invalid length. [ 2569.928444][T21758] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2570.070846][T21769] netlink: 'syz.0.16642': attribute type 2 has an invalid length. [ 2570.087313][T21769] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16642'. [ 2570.209539][T21772] netlink: 'syz.4.16643': attribute type 10 has an invalid length. [ 2570.440371][ T6512] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2572.356837][T21796] validate_nla: 2 callbacks suppressed [ 2572.356856][T21796] netlink: 'syz.0.16653': attribute type 25 has an invalid length. [ 2572.583205][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2573.246311][T21810] netlink: 'syz.4.16654': attribute type 10 has an invalid length. [ 2573.264361][T21810] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16654'. [ 2573.335217][T21812] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2573.449949][T21814] netlink: 'syz.3.16657': attribute type 10 has an invalid length. [ 2573.570687][T21822] netlink: 'syz.1.16661': attribute type 2 has an invalid length. [ 2573.579897][T21822] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16661'. [ 2573.613002][T21823] netlink: 'syz.0.16660': attribute type 21 has an invalid length. [ 2573.635367][T21823] netlink: 'syz.0.16660': attribute type 11 has an invalid length. [ 2573.964747][T21841] netlink: 'syz.0.16665': attribute type 25 has an invalid length. [ 2574.595864][T21846] netlink: 'syz.2.16668': attribute type 10 has an invalid length. [ 2574.619290][T21846] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16668'. [ 2575.385210][T21859] netlink: 'syz.3.16672': attribute type 10 has an invalid length. [ 2575.543910][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2575.544955][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 2575.775672][T21867] netlink: 'syz.1.16675': attribute type 21 has an invalid length. [ 2576.119696][T21865] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2578.056515][T21876] validate_nla: 1 callbacks suppressed [ 2578.056533][T21876] netlink: 'syz.1.16678': attribute type 2 has an invalid length. [ 2578.093135][T21876] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16678'. [ 2579.545715][ T5921] wlan1: Trigger new scan to find an IBSS to join [ 2579.554324][ T5867] wlan1: Trigger new scan to find an IBSS to join [ 2579.590805][T21884] netlink: 'syz.2.16681': attribute type 10 has an invalid length. [ 2579.600941][T21884] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16681'. [ 2579.668580][T21900] netlink: 'syz.0.16687': attribute type 10 has an invalid length. [ 2579.689645][T21903] netlink: 'syz.1.16688': attribute type 21 has an invalid length. [ 2579.713277][T21903] netlink: 'syz.1.16688': attribute type 11 has an invalid length. [ 2579.886372][T21911] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2580.934063][ T6512] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2581.061897][T21921] netlink: 'syz.0.16695': attribute type 2 has an invalid length. [ 2581.111923][T21921] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16695'. [ 2581.584478][T21936] netlink: 'syz.1.16702': attribute type 10 has an invalid length. [ 2581.877353][T21940] netlink: 'syz.2.16703': attribute type 10 has an invalid length. [ 2581.900194][T21940] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16703'. [ 2582.274380][T21946] netlink: 'syz.3.16704': attribute type 21 has an invalid length. [ 2582.290946][T21946] netlink: 'syz.3.16704': attribute type 11 has an invalid length. [ 2583.201523][T21958] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2583.543299][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2584.322584][T21976] netlink: 'syz.4.16715': attribute type 10 has an invalid length. [ 2584.427299][T21979] netlink: 'syz.0.16717': attribute type 21 has an invalid length. [ 2584.443323][T21979] netlink: 'syz.0.16717': attribute type 11 has an invalid length. [ 2584.827209][T21990] netlink: 'syz.3.16718': attribute type 10 has an invalid length. [ 2584.844054][T21990] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16718'. [ 2587.030231][ T5866] wlan1: Creating new IBSS network, BSSID 66:d1:90:72:a8:f3 [ 2587.647699][T22015] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2589.108403][T22022] netlink: 'syz.4.16731': attribute type 10 has an invalid length. [ 2589.393473][T22031] netlink: 'syz.2.16734': attribute type 21 has an invalid length. [ 2589.413880][T22031] netlink: 'syz.2.16734': attribute type 11 has an invalid length. [ 2590.073386][T22041] netlink: 'syz.0.16736': attribute type 10 has an invalid length. [ 2590.133692][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.140083][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.202534][T22041] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16736'. [ 2590.645486][T22054] FAULT_INJECTION: forcing a failure. [ 2590.645486][T22054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2590.659094][T22054] CPU: 1 PID: 22054 Comm: syz.0.16741 Not tainted syzkaller #0 [ 2590.666688][T22054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2590.676758][T22054] Call Trace: [ 2590.680049][T22054] [ 2590.682988][T22054] dump_stack_lvl+0x188/0x24e [ 2590.687731][T22054] ? show_regs_print_info+0x12/0x12 [ 2590.692956][T22054] ? load_image+0x400/0x400 [ 2590.697475][T22054] ? __lock_acquire+0x7d10/0x7d10 [ 2590.702518][T22054] ? snprintf+0xe5/0x140 [ 2590.706780][T22054] should_fail_ex+0x399/0x4d0 [ 2590.711475][T22054] _copy_to_user+0x2c/0x130 [ 2590.715998][T22054] simple_read_from_buffer+0xe3/0x150 [ 2590.721385][T22054] proc_fail_nth_read+0x1a6/0x220 [ 2590.726459][T22054] ? proc_fault_inject_write+0x310/0x310 [ 2590.732106][T22054] ? fsnotify_perm+0x248/0x550 [ 2590.736887][T22054] ? proc_fault_inject_write+0x310/0x310 [ 2590.742538][T22054] vfs_read+0x2de/0xa00 [ 2590.746713][T22054] ? kernel_read+0x1e0/0x1e0 [ 2590.751319][T22054] ? __fget_files+0x28/0x4b0 [ 2590.755928][T22054] ? __fget_files+0x28/0x4b0 [ 2590.760533][T22054] ? __fget_files+0x43d/0x4b0 [ 2590.765236][T22054] ? __fdget_pos+0x2ae/0x360 [ 2590.769841][T22054] ? ksys_read+0x71/0x250 [ 2590.774192][T22054] ksys_read+0x14c/0x250 [ 2590.778459][T22054] ? vfs_write+0xa30/0xa30 [ 2590.782909][T22054] ? lockdep_hardirqs_on+0x94/0x140 [ 2590.788136][T22054] do_syscall_64+0x4c/0xa0 [ 2590.792599][T22054] ? clear_bhb_loop+0x60/0xb0 [ 2590.797308][T22054] ? clear_bhb_loop+0x60/0xb0 [ 2590.802008][T22054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2590.807959][T22054] RIP: 0033:0x7f606f15d68e [ 2590.812393][T22054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2590.832017][T22054] RSP: 002b:00007f6070132fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2590.840446][T22054] RAX: ffffffffffffffda RBX: 00007f60701336c0 RCX: 00007f606f15d68e [ 2590.848424][T22054] RDX: 000000000000000f RSI: 00007f60701330a0 RDI: 0000000000000004 [ 2590.856415][T22054] RBP: 00007f6070133090 R08: 0000000000000000 R09: 0000000000000000 [ 2590.864398][T22054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2590.872391][T22054] R13: 00007f606f416038 R14: 00007f606f415fa0 R15: 00007ffd98ee6e48 [ 2590.880392][T22054] [ 2591.185053][T22067] netlink: 'syz.0.16743': attribute type 10 has an invalid length. [ 2592.441025][T22069] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2592.692840][T22078] netlink: 'syz.4.16749': attribute type 21 has an invalid length. [ 2592.701320][T22078] netlink: 'syz.4.16749': attribute type 11 has an invalid length. [ 2593.479038][ T4224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2593.625706][T22086] netlink: 'syz.1.16752': attribute type 10 has an invalid length. [ 2593.707860][T22086] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16752'. [ 2594.587597][ T4224] wlan1: Trigger new scan to find an IBSS to join [ 2595.598811][T22099] netlink: 'syz.1.16757': attribute type 10 has an invalid length. [ 2595.727627][T22107] FAULT_INJECTION: forcing a failure. [ 2595.727627][T22107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2595.763369][T22107] CPU: 0 PID: 22107 Comm: syz.2.16761 Not tainted syzkaller #0 [ 2595.771065][T22107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2595.781159][T22107] Call Trace: [ 2595.784501][T22107] [ 2595.787467][T22107] dump_stack_lvl+0x188/0x24e [ 2595.792201][T22107] ? show_regs_print_info+0x12/0x12 [ 2595.797444][T22107] ? load_image+0x400/0x400 [ 2595.801994][T22107] ? __might_fault+0xa6/0x120 [ 2595.806745][T22107] should_fail_ex+0x399/0x4d0 [ 2595.811478][T22107] copyin+0x1b/0x120 [ 2595.815437][T22107] _copy_from_iter+0x447/0x1130 [ 2595.820364][T22107] ? copyout_mc+0x110/0x110 [ 2595.824919][T22107] ? __virt_addr_valid+0x188/0x540 [ 2595.830107][T22107] ? __virt_addr_valid+0x188/0x540 [ 2595.835302][T22107] ? __virt_addr_valid+0x465/0x540 [ 2595.840473][T22107] ? __check_object_size+0x500/0xa40 [ 2595.845839][T22107] netlink_sendmsg+0x755/0xbd0 [ 2595.850693][T22107] ? netlink_getsockopt+0x550/0x550 [ 2595.855995][T22107] ? aa_sock_msg_perm+0x94/0x150 [ 2595.860996][T22107] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2595.866330][T22107] ? security_socket_sendmsg+0x7c/0xa0 [ 2595.871850][T22107] ? netlink_getsockopt+0x550/0x550 [ 2595.877122][T22107] ____sys_sendmsg+0x5be/0x970 [ 2595.881977][T22107] ? __sys_sendmsg_sock+0x30/0x30 [ 2595.887041][T22107] ? __import_iovec+0x315/0x500 [ 2595.891949][T22107] ? import_iovec+0x6f/0xa0 [ 2595.896524][T22107] ___sys_sendmsg+0x2a2/0x360 [ 2595.901269][T22107] ? __sys_sendmsg+0x290/0x290 [ 2595.906136][T22107] ? trace_call_bpf+0xbf/0x6b0 [ 2595.911045][T22107] __se_sys_sendmsg+0x1bb/0x2a0 [ 2595.915966][T22107] ? __x64_sys_sendmsg+0x80/0x80 [ 2595.921004][T22107] ? lockdep_hardirqs_on+0x94/0x140 [ 2595.926269][T22107] do_syscall_64+0x4c/0xa0 [ 2595.930727][T22107] ? clear_bhb_loop+0x60/0xb0 [ 2595.935450][T22107] ? clear_bhb_loop+0x60/0xb0 [ 2595.940172][T22107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2595.946105][T22107] RIP: 0033:0x7fb3b1d9ce59 [ 2595.950584][T22107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2595.970236][T22107] RSP: 002b:00007fb3b2ce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2595.978681][T22107] RAX: ffffffffffffffda RBX: 00007fb3b2015fa0 RCX: 00007fb3b1d9ce59 [ 2595.986691][T22107] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2595.994697][T22107] RBP: 00007fb3b2ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 2596.002705][T22107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2596.010721][T22107] R13: 00007fb3b2016038 R14: 00007fb3b2015fa0 R15: 00007fff296ea378 [ 2596.018801][T22107] [ 2596.864713][T22111] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2597.007833][T22115] netlink: 'syz.2.16763': attribute type 21 has an invalid length. [ 2597.023124][T22115] netlink: 'syz.2.16763': attribute type 11 has an invalid length. [ 2597.377709][T22117] netlink: 'syz.0.16764': attribute type 10 has an invalid length. [ 2597.396474][T22117] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16764'. [ 2597.835108][T22141] netlink: 'syz.0.16772': attribute type 10 has an invalid length. [ 2598.677534][T22149] netlink: 'syz.0.16776': attribute type 21 has an invalid length. [ 2598.743394][T22149] netlink: 'syz.0.16776': attribute type 11 has an invalid length. [ 2598.887954][T22155] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2599.553681][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2600.925169][T22164] netlink: 'syz.0.16782': attribute type 10 has an invalid length. [ 2600.997398][T22164] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16782'. [ 2601.035571][T22175] netlink: 'syz.2.16786': attribute type 10 has an invalid length. [ 2601.089017][T22169] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2601.725241][T22192] netlink: 'syz.1.16791': attribute type 21 has an invalid length. [ 2601.750824][T22192] netlink: 'syz.1.16791': attribute type 11 has an invalid length. [ 2602.505151][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2602.611361][T22208] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2603.907820][T22216] netlink: 'syz.1.16800': attribute type 10 has an invalid length. [ 2604.063456][T22214] netlink: 'syz.3.16799': attribute type 10 has an invalid length. [ 2604.076391][T22214] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16799'. [ 2604.392823][T22228] netlink: 'syz.3.16803': attribute type 21 has an invalid length. [ 2604.401818][T22228] netlink: 'syz.3.16803': attribute type 11 has an invalid length. [ 2605.005960][T22245] netlink: 'syz.4.16810': attribute type 25 has an invalid length. [ 2605.566769][ T5866] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2606.659557][T22252] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2607.589957][T22257] netlink: 'syz.2.16814': attribute type 10 has an invalid length. [ 2607.616471][T22257] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16814'. [ 2607.639489][T22262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2607.657384][T22262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2607.704680][T22262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2607.720941][T22262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2608.778422][T22264] netlink: 'syz.3.16816': attribute type 10 has an invalid length. [ 2608.897851][T22270] netlink: 'syz.2.16818': attribute type 21 has an invalid length. [ 2608.926988][T22270] netlink: 'syz.2.16818': attribute type 11 has an invalid length. [ 2609.325326][T22284] netlink: 'syz.1.16824': attribute type 21 has an invalid length. [ 2609.383517][T22284] netlink: 'syz.1.16824': attribute type 11 has an invalid length. [ 2610.678168][T22304] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2610.741695][T22300] netlink: 'syz.0.16830': attribute type 10 has an invalid length. [ 2610.965644][T22311] netlink: 'syz.2.16829': attribute type 10 has an invalid length. [ 2610.985091][T22311] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16829'. [ 2611.234737][T22320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2611.273534][T22320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2611.488055][T22320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2611.503901][T22320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2611.610358][T22320] bond0: (slave batadv0): Releasing backup interface [ 2611.712000][T22323] netlink: 'syz.3.16837': attribute type 21 has an invalid length. [ 2611.772057][T22323] netlink: 'syz.3.16837': attribute type 11 has an invalid length. [ 2614.503485][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2614.758097][T22350] netlink: 'syz.1.16844': attribute type 10 has an invalid length. [ 2615.040391][T22368] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2615.466027][T22375] netlink: 'syz.2.16853': attribute type 21 has an invalid length. [ 2615.475589][T22375] netlink: 'syz.2.16853': attribute type 11 has an invalid length. [ 2615.485653][T22358] netlink: 'syz.4.16847': attribute type 10 has an invalid length. [ 2615.495192][T22358] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16847'. [ 2615.990266][T22389] netlink: 'syz.3.16860': attribute type 10 has an invalid length. [ 2616.438800][T22396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2616.482019][T22396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2616.582833][T22396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2616.590858][T22396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2616.612382][T22396] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2616.631367][T22396] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2617.026680][ T4224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2617.543378][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2617.556057][ T4224] wlan1: Trigger new scan to find an IBSS to join [ 2618.626334][T22417] netlink: 'syz.2.16868': attribute type 21 has an invalid length. [ 2618.636580][T22417] netlink: 'syz.2.16868': attribute type 11 has an invalid length. [ 2618.653502][T22412] netlink: 'syz.4.16866': attribute type 10 has an invalid length. [ 2618.661720][T22412] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16866'. [ 2618.749143][T13016] wlan1: Creating new IBSS network, BSSID f6:9c:f2:fa:7a:d9 [ 2618.868919][T22422] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2619.100109][T22429] netlink: 'syz.2.16871': attribute type 10 has an invalid length. [ 2619.637485][T22442] netlink: 'syz.4.16875': attribute type 10 has an invalid length. [ 2619.661937][T22442] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16875'. [ 2620.554253][T22451] netlink: 'syz.0.16881': attribute type 21 has an invalid length. [ 2620.562332][T22451] netlink: 'syz.0.16881': attribute type 11 has an invalid length. [ 2621.472398][T22449] netlink: 'syz.2.16879': attribute type 10 has an invalid length. [ 2621.481657][T22449] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16879'. [ 2621.553425][T13016] wlan1: Trigger new scan to find an IBSS to join [ 2621.564447][T22460] netlink: 'syz.4.16882': attribute type 10 has an invalid length. [ 2621.575197][T22460] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16882'. [ 2622.382926][T22472] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2622.473852][T16912] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2623.056887][T22491] netlink: 'syz.1.16894': attribute type 21 has an invalid length. [ 2623.117271][T22491] netlink: 'syz.1.16894': attribute type 11 has an invalid length. [ 2623.231714][T22484] netlink: 'syz.0.16892': attribute type 10 has an invalid length. [ 2623.257785][T22484] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16892'. [ 2623.899471][T22498] netlink: 'syz.1.16896': attribute type 10 has an invalid length. [ 2623.945047][T22498] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16896'. [ 2624.036288][T22503] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.16898'. [ 2624.053849][T22501] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2624.137650][T22510] netlink: 'syz.3.16895': attribute type 10 has an invalid length. [ 2624.203068][T22510] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16895'. [ 2624.618587][T22519] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2624.986099][T22532] netlink: 'syz.0.16907': attribute type 21 has an invalid length. [ 2625.055164][T22528] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16906'. [ 2626.517999][T22546] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2627.326263][T22554] validate_nla: 3 callbacks suppressed [ 2627.326301][T22554] netlink: 'syz.1.16916': attribute type 10 has an invalid length. [ 2627.360032][T22554] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16916'. [ 2627.599383][T22572] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2627.804023][T22571] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.16921'. [ 2627.827516][T22576] netlink: 'syz.2.16922': attribute type 21 has an invalid length. [ 2627.854731][T22576] netlink: 'syz.2.16922': attribute type 11 has an invalid length. [ 2628.079309][T22581] netlink: 'syz.3.16924': attribute type 10 has an invalid length. [ 2628.406189][T22591] netlink: 'syz.3.16928': attribute type 21 has an invalid length. [ 2628.583352][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2628.734978][T22600] netlink: 'syz.3.16931': attribute type 10 has an invalid length. [ 2628.921939][T22610] netlink: 'syz.3.16936': attribute type 21 has an invalid length. [ 2628.937939][T22610] netlink: 'syz.3.16936': attribute type 11 has an invalid length. [ 2629.507310][T22622] netlink: 'syz.2.16939': attribute type 10 has an invalid length. [ 2629.553200][T22622] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16939'. [ 2631.082399][T22627] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.16942'. [ 2631.602714][T22636] netlink: 'syz.2.16946': attribute type 21 has an invalid length. [ 2632.544145][T22646] netlink: 'syz.0.16948': attribute type 10 has an invalid length. [ 2632.575147][T22652] netlink: 'syz.1.16950': attribute type 21 has an invalid length. [ 2632.600526][T22652] netlink: 'syz.1.16950': attribute type 11 has an invalid length. [ 2633.208760][T22670] netlink: 'syz.3.16956': attribute type 10 has an invalid length. [ 2633.236839][T22670] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16956'. [ 2633.420383][T22674] netlink: 'syz.3.16958': attribute type 25 has an invalid length. [ 2633.545030][ T5866] wlan1: Trigger new scan to find an IBSS to join [ 2635.167543][T16912] wlan1: Creating new IBSS network, BSSID 56:7f:a6:a9:a9:d1 [ 2635.334932][T22693] netlink: 'syz.3.16964': attribute type 21 has an invalid length. [ 2635.353624][T22695] netlink: 'syz.4.16965': attribute type 25 has an invalid length. [ 2635.441536][T22701] netlink: 'syz.0.16968': attribute type 21 has an invalid length. [ 2635.461332][T22701] netlink: 'syz.0.16968': attribute type 11 has an invalid length. [ 2635.547380][T22706] netlink: 'syz.3.16970': attribute type 21 has an invalid length. [ 2635.981773][T22717] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16983'. [ 2637.912343][T22724] validate_nla: 2 callbacks suppressed [ 2637.912360][T22724] netlink: 'syz.0.16976': attribute type 21 has an invalid length. [ 2637.963691][T22724] netlink: 'syz.0.16976': attribute type 11 has an invalid length. [ 2638.292838][T22745] netlink: 'syz.3.16982': attribute type 21 has an invalid length. [ 2639.188470][T22749] netlink: 'syz.3.16985': attribute type 25 has an invalid length. [ 2639.395409][T22753] netlink: 'syz.2.16987': attribute type 10 has an invalid length. [ 2639.499226][T22755] netlink: 'syz.4.16989': attribute type 10 has an invalid length. [ 2639.528102][T22755] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16989'. [ 2640.707710][T22778] netlink: 'syz.2.16997': attribute type 21 has an invalid length. [ 2642.027263][T22792] netlink: 'syz.0.17003': attribute type 25 has an invalid length. [ 2642.747014][T22796] netlink: 'syz.0.17006': attribute type 10 has an invalid length. [ 2642.789381][T22794] netlink: 'syz.4.17005': attribute type 10 has an invalid length. [ 2642.816552][T22794] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17005'. [ 2642.950989][T22804] netlink: 'syz.3.17009': attribute type 21 has an invalid length. [ 2642.970794][T22804] netlink: 'syz.3.17009': attribute type 11 has an invalid length. [ 2647.592565][T22849] netlink: 'syz.1.17023': attribute type 21 has an invalid length. [ 2647.673353][T22849] netlink: 'syz.1.17023': attribute type 11 has an invalid length. [ 2647.714562][T22853] netlink: 'syz.2.17022': attribute type 10 has an invalid length. [ 2647.722503][T22853] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17022'. [ 2648.278133][T22867] netlink: 'syz.4.17029': attribute type 21 has an invalid length. [ 2648.286637][T22867] netlink: 'syz.4.17029': attribute type 11 has an invalid length. [ 2648.560182][T22873] netlink: 'syz.3.17032': attribute type 10 has an invalid length. [ 2648.759021][T22881] netlink: 'syz.1.17035': attribute type 10 has an invalid length. [ 2648.767349][T22881] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17035'. [ 2648.779450][ T4224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2649.506422][T22899] netlink: 'syz.1.17038': attribute type 10 has an invalid length. [ 2649.536447][T22899] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17038'. [ 2650.493243][T22904] netlink: 'syz.0.17041': attribute type 21 has an invalid length. [ 2650.524532][T22904] netlink: 'syz.0.17041': attribute type 11 has an invalid length. [ 2651.545526][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.551972][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.659781][T22919] netlink: 'syz.0.17047': attribute type 10 has an invalid length. [ 2652.116812][T22926] netlink: 'syz.1.17049': attribute type 21 has an invalid length. [ 2652.143893][T22926] netlink: 'syz.1.17049': attribute type 11 has an invalid length. [ 2652.561772][ T5866] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2653.063245][T22944] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17056'. [ 2653.461153][T22959] validate_nla: 3 callbacks suppressed [ 2653.461189][T22959] netlink: 'syz.3.17062': attribute type 10 has an invalid length. [ 2653.714340][T22972] netlink: 'syz.3.17065': attribute type 25 has an invalid length. [ 2654.453738][T22978] netlink: 'syz.2.17068': attribute type 10 has an invalid length. [ 2654.461696][T22978] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17068'. [ 2656.809739][T22981] netlink: 'syz.4.17070': attribute type 10 has an invalid length. [ 2656.818725][T22981] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17070'. [ 2657.161226][T22997] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2657.199347][T23001] netlink: 'syz.1.17075': attribute type 10 has an invalid length. [ 2659.848388][T23039] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2659.874595][T23051] netlink: 'syz.1.17090': attribute type 10 has an invalid length. [ 2661.118644][T23069] netlink: 'syz.0.17097': attribute type 10 has an invalid length. [ 2661.134007][T23069] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17097'. [ 2662.503368][T16912] wlan1: Trigger new scan to find an IBSS to join [ 2662.676618][T23093] netlink: 'syz.3.17106': attribute type 10 has an invalid length. [ 2663.053019][T23094] netlink: 'syz.4.17107': attribute type 10 has an invalid length. [ 2663.064655][T23094] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17107'. [ 2664.409453][T23115] netlink: 'syz.3.17112': attribute type 21 has an invalid length. [ 2664.446435][T23115] netlink: 'syz.3.17112': attribute type 11 has an invalid length. [ 2665.257040][ T5866] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2665.627876][T23135] netlink: 'syz.1.17122': attribute type 10 has an invalid length. [ 2666.510411][T23139] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2668.751865][T23151] netlink: 'syz.0.17123': attribute type 10 has an invalid length. [ 2668.772708][T23151] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17123'. [ 2668.795039][T23155] netlink: 'syz.4.17127': attribute type 10 has an invalid length. [ 2668.805389][T23155] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17127'. [ 2669.076913][T23165] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2670.321238][T23175] netlink: 'syz.0.17136': attribute type 10 has an invalid length. [ 2670.504752][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2670.618349][T23183] netlink: 'syz.2.17138': attribute type 10 has an invalid length. [ 2670.634545][T23183] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17138'. [ 2670.955110][T23190] netlink: 'syz.3.17142': attribute type 10 has an invalid length. [ 2671.007015][T23190] netlink: 2 bytes leftover after parsing attributes in process `syz.3.17142'. [ 2671.344501][T23201] netlink: 'syz.1.17141': attribute type 10 has an invalid length. [ 2671.420545][T23201] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17141'. [ 2671.544523][ T4224] wlan1: Trigger new scan to find an IBSS to join [ 2672.036597][T23220] netlink: 'syz.0.17150': attribute type 10 has an invalid length. [ 2672.515273][T23223] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2672.546508][T23214] netlink: 'syz.2.17148': attribute type 10 has an invalid length. [ 2672.581728][T23214] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17148'. [ 2672.621369][T23231] netlink: 'syz.0.17155': attribute type 10 has an invalid length. [ 2672.630983][T23231] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17155'. [ 2673.544443][T16912] wlan1: Creating new IBSS network, BSSID 36:3d:c1:d9:30:9e [ 2674.815647][T23263] netlink: 'syz.2.17164': attribute type 10 has an invalid length. [ 2675.436122][T23277] netlink: 'syz.1.17167': attribute type 10 has an invalid length. [ 2675.543534][T16912] wlan1: Trigger new scan to find an IBSS to join [ 2675.577854][T23277] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17167'. [ 2675.787386][T23269] netlink: 'syz.4.17168': attribute type 10 has an invalid length. [ 2675.805629][T23269] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17168'. [ 2675.839105][T23276] netlink: 'syz.0.17170': attribute type 10 has an invalid length. [ 2675.856531][T23276] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17170'. [ 2676.804929][T23292] netlink: 'syz.0.17174': attribute type 10 has an invalid length. [ 2676.921591][T23292] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17174'. [ 2677.518407][T23310] netlink: 'syz.3.17181': attribute type 10 has an invalid length. [ 2677.974013][T23316] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2678.352151][T23323] netlink: 'syz.3.17184': attribute type 10 has an invalid length. [ 2678.550848][T23322] netlink: 'syz.0.17183': attribute type 10 has an invalid length. [ 2678.563290][T23322] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17183'. [ 2678.674315][T23325] netlink: 'syz.2.17185': attribute type 10 has an invalid length. [ 2678.687266][T23325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17185'. [ 2679.093737][T23354] netlink: 'syz.4.17194': attribute type 10 has an invalid length. [ 2679.441954][T23352] netlink: 'syz.3.17195': attribute type 10 has an invalid length. [ 2679.455618][T23352] netlink: 2 bytes leftover after parsing attributes in process `syz.3.17195'. [ 2679.553375][ T6512] wlan1: Trigger new scan to find an IBSS to join [ 2680.098557][T23373] netlink: 'syz.4.17199': attribute type 10 has an invalid length. [ 2680.584217][ T4224] wlan1: Trigger new scan to find an IBSS to join [ 2681.179730][ T6512] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2681.204660][T23382] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2681.217022][ T4224] ------------[ cut here ]------------ [ 2681.222773][ T4224] WARNING: CPU: 1 PID: 4224 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 2681.233030][ T4224] Modules linked in: [ 2681.236962][ T4224] CPU: 1 PID: 4224 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 2681.244569][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2681.254686][ T4224] Workqueue: cfg80211 cfg80211_event_work [ 2681.260479][ T4224] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2681.266723][ T4224] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 85 ed f7 0f 0b eb bb e8 58 85 ed f7 <0f> 0b eb b2 e8 4f 85 ed f7 0f 0b e9 77 fd ff ff e8 43 85 ed f7 0f [ 2681.286405][ T4224] RSP: 0018:ffffc9000dee7aa0 EFLAGS: 00010293 [ 2681.292511][ T4224] RAX: ffffffff89950158 RBX: dffffc0000000000 RCX: ffff88805f151dc0 [ 2681.300558][ T4224] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 2681.308586][ T4224] RBP: ffffc9000dee7b70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 2681.316627][ T4224] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff88804b38b5b8 [ 2681.324652][ T4224] R13: 1ffff92001bdcf5c R14: 000000000000001f R15: ffff88807327cc90 [ 2681.332662][ T4224] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2681.341673][ T4224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2681.348293][ T4224] CR2: 0000555766908168 CR3: 0000000030a6c000 CR4: 00000000003506e0 [ 2681.356337][ T4224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2681.364371][ T4224] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2681.372374][ T4224] Call Trace: [ 2681.375732][ T4224] [ 2681.378702][ T4224] ? mutex_lock_nested+0x10/0x10 [ 2681.383752][ T4224] ? trace_rdev_return_void+0x240/0x240 [ 2681.389356][ T4224] cfg80211_process_wdev_events+0x3ad/0x550 [ 2681.395338][ T4224] cfg80211_process_rdev_events+0x9d/0x110 [ 2681.401181][ T4224] ? process_one_work+0x7b0/0x1160 [ 2681.406373][ T4224] cfg80211_event_work+0x2b/0x40 [ 2681.411355][ T4224] process_one_work+0x8a2/0x1160 [ 2681.413222][T23379] netlink: 'syz.4.17203': attribute type 10 has an invalid length. [ 2681.416370][ T4224] ? worker_detach_from_pool+0x240/0x240 [ 2681.427758][T23379] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17203'. [ 2681.429917][ T4224] ? _raw_spin_lock_irq+0x86/0xf0 [ 2681.443970][ T4224] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2681.448995][ T4224] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2681.454598][ T4224] ? kthread_data+0x4b/0xc0 [ 2681.459151][ T4224] worker_thread+0xaa2/0x1270 [ 2681.463943][ T4224] ? __kthread_parkme+0x162/0x1c0 [ 2681.469035][ T4224] kthread+0x29d/0x330 [ 2681.473160][ T4224] ? worker_clr_flags+0x1a0/0x1a0 [ 2681.478220][ T4224] ? kthread_blkcg+0xd0/0xd0 [ 2681.482849][ T4224] ret_from_fork+0x1f/0x30 [ 2681.487389][ T4224] [ 2681.490441][ T4224] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2681.497737][ T4224] CPU: 1 PID: 4224 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 2681.505278][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2681.515333][ T4224] Workqueue: cfg80211 cfg80211_event_work [ 2681.521061][ T4224] Call Trace: [ 2681.524340][ T4224] [ 2681.527267][ T4224] dump_stack_lvl+0x188/0x24e [ 2681.532036][ T4224] ? memcpy+0x3c/0x60 [ 2681.536016][ T4224] ? show_regs_print_info+0x12/0x12 [ 2681.541220][ T4224] ? load_image+0x400/0x400 [ 2681.545753][ T4224] panic+0x2e5/0x730 [ 2681.549689][ T4224] ? bpf_jit_dump+0xd0/0xd0 [ 2681.554239][ T4224] ? ret_from_fork+0x1f/0x30 [ 2681.558864][ T4224] __warn+0x2f8/0x4f0 [ 2681.562855][ T4224] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2681.568399][ T4224] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2681.573954][ T4224] report_bug+0x2ba/0x4f0 [ 2681.578352][ T4224] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2681.583899][ T4224] handle_bug+0x3a/0x70 [ 2681.588058][ T4224] exc_invalid_op+0x16/0x40 [ 2681.592601][ T4224] asm_exc_invalid_op+0x16/0x20 [ 2681.597469][ T4224] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2681.603644][ T4224] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 85 ed f7 0f 0b eb bb e8 58 85 ed f7 <0f> 0b eb b2 e8 4f 85 ed f7 0f 0b e9 77 fd ff ff e8 43 85 ed f7 0f [ 2681.623257][ T4224] RSP: 0018:ffffc9000dee7aa0 EFLAGS: 00010293 [ 2681.629344][ T4224] RAX: ffffffff89950158 RBX: dffffc0000000000 RCX: ffff88805f151dc0 [ 2681.637321][ T4224] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 2681.645303][ T4224] RBP: ffffc9000dee7b70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 2681.653271][ T4224] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff88804b38b5b8 [ 2681.661254][ T4224] R13: 1ffff92001bdcf5c R14: 000000000000001f R15: ffff88807327cc90 [ 2681.669245][ T4224] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2681.674801][ T4224] ? mutex_lock_nested+0x10/0x10 [ 2681.679745][ T4224] ? trace_rdev_return_void+0x240/0x240 [ 2681.685299][ T4224] cfg80211_process_wdev_events+0x3ad/0x550 [ 2681.691198][ T4224] cfg80211_process_rdev_events+0x9d/0x110 [ 2681.697006][ T4224] ? process_one_work+0x7b0/0x1160 [ 2681.702149][ T4224] cfg80211_event_work+0x2b/0x40 [ 2681.707112][ T4224] process_one_work+0x8a2/0x1160 [ 2681.712058][ T4224] ? worker_detach_from_pool+0x240/0x240 [ 2681.717719][ T4224] ? _raw_spin_lock_irq+0x86/0xf0 [ 2681.722743][ T4224] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2681.727800][ T4224] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2681.733387][ T4224] ? kthread_data+0x4b/0xc0 [ 2681.737953][ T4224] worker_thread+0xaa2/0x1270 [ 2681.742670][ T4224] ? __kthread_parkme+0x162/0x1c0 [ 2681.747733][ T4224] kthread+0x29d/0x330 [ 2681.751804][ T4224] ? worker_clr_flags+0x1a0/0x1a0 [ 2681.756846][ T4224] ? kthread_blkcg+0xd0/0xd0 [ 2681.761465][ T4224] ret_from_fork+0x1f/0x30 [ 2681.765917][ T4224] [ 2681.769547][ T4224] Kernel Offset: disabled [ 2681.773946][ T4224] Rebooting in 86400 seconds..